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Abstract 



In answer set programming (ASP), a problem at hand is solved by (i) writing a logic pro- 
gram whose answer sets correspond to the solutions of the problem, and by (ii) computing 
the answer sets of the program using an answer set solver as a search engine. Typically, a 
programmer creates a series of gradually improving logic programs for a particular prob- 
lem when optimizing program length and execution time on a particular solver. This leads 
the programmer to a meta-level problem of ensuring that the programs are equivalent, 
i.e., they give rise to the same answer sets. To ease answer set programming at method- 
■ ological level, we propose a translation-based method for verifying the equivalence of logic 

programs. The basic idea is to translate logic programs P and Q under consideration into 
\Q , a single logic program EQT(P, Q) whose answer sets (if such exist) yield counter-examples 

to the equivalence of P and Q. The method is developed here in a slightly more general 
""^ ' setting by taking the visibility of atoms properly into account when comparing answer 

sets. The translation-based approach presented in the paper has been implemented as a 
translator called lpeq that enables the verification of weak equivalence within the smod- 
els system using the same search engine as for the search of models. Our experiments 
with lpeq and smodels suggest that establishing the equivalence of logic programs in 
$—1 ' this way is in certain cases much faster than naive cross-checking of answer sets. 



KEYWORDS: Answer set programming, weak equivalence, programming methodology, 
program optimization 



1 Introduction 

Answer set programming (ASP) has recently been proposed and promoted as a self- 
standing logic programming paradigm | |Marek and Truszczyriski"l9 99 Niemela, 1999 
IGelfond and Leone 2f)f)2j) . Indeed, the paradigm has received increasing attention 
since efficient implementations such as DLV {Leone et al. 200ffi ) and SMODELS {Simons et al. 2002) 
became available in the late nineties. There are numerous applications of ASP 



* This is an extended version of a paper I Janhunen and Oikarinen 2002 ) presented at the 8th 
European Workshop on Logics in Artificial Intelligence in Cosenza, Italy. 
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ranging, e.g., from product configuration QSoininen et al. 200111 to a decision sup- 
port system of the space shuttle i Balduccini et al. 200111 . The variety of answer set 
solvers is also rapidly growing as new solvers are being developed constantly for the 
sake of efficiency. The reader is referred to ij.Tanhunen et al. 2000ULin and Zhao 2 002: 
ILierler and Maratea 2004II.Tanhunen 200H|Anger et al. 2005tlGressmann et al. 2 005 
|Liu and Truszczyhski 2005| | in this respect. 

Despite the declarative nature of ASP, the development of programs resembles 
that of programs in conventional programming. That is, a programmer often devel- 
ops a series of gradually improving programs for a particular problem, e.g., when 
optimizing execution time and space. As a consequence, the programmer needs to 
ensure that subsequent programs which differ in performance yield the same output. 
This setting leads us to the problem of verifying whether given two logic programs 
P and Q have exactly the same answer sets, i.e., are weakly equivalent (denoted 
P = Q). Looking at this from the ASP perspective, weakly equivalent programs 
produce the same solutions for the problem that they formalize. 

There are also other notions of equivalence that have been proposed for logic pro- 
grams. Lifschitz et al. (2001 1 consider P and Q strongly equivalent, denoted P = s Q, 



if and only if P U R = Q U R for all programs R each of which acts as a potential 
context for P and Q. By setting R = in the definition of = s , we obtain that 
P = s Q implies P = Q but the converse does not hold in general. Consequently, 
the question whether P = Q holds remains open whenever P ^ s Q turns out to 
be the case. This implies that verifying P = Q remains as a problem of its own, 
which cannot be fully compensated by verifying P = s Q. As suggested by its name, 
= s is a much stronger relation than = in the sense that the former relates far 
fewer programs than the latter. This makes = s better applicable to subprograms 
or program modules constituting larger programs rather than complete programs 
for which = is more natural. Moreover, there is a number of characterizations of 
strong equivalence ijLifschitz et al. 2001llPearce et al. 200lllLin 20()2llTurner"2003|l 
which among other things indicate that strongly equivalent programs are classically 
equivalent, but not necessarily vice versa as to be demonstrated in Example 14.41 
Thus strong equivalence permits only classical program transformations, i.e., sub- 
stitutions of a program module (a set of rules) by another. In contrast to this, weak 
equivalence is more liberal as regards program transformations some of which are 
not classical but still used in practice; the reader may consult Example 14.31 for an 
instance. 

For the reasons discussed above, we concentrate on the case of complete pro- 
grams and weak equivalence in this article. We develop a method that extends 
H-Tanhunen and Oikarinen 20"02ll.Ta,nhunen and Oikarinen 200 4) and hence fully cov- 
ers the class of weight constraint programs supported by the front-end lparse 
(Syrjanen 2001) used with the SMODELS system ijSimons et al. 2002|l . The key idea 
in our approach is to translate logic programs P and Q under consideration into 
a single logic program EQT(P, Q) which has an answer set if and only if P has 
an answer set that is not an answer set of Q. Such answer sets, if found, act as 
counter-examples to the equivalence of P and Q. Consequently, the equivalence of 
P and Q can be established by showing that EQT(P, Q) and EQT(Q, P) have no 
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answer sets. 1 Thus the existing search engine of the SMODELS system can be used 
for the search of counter-examples and there is no need to develop a special pur- 
pose search engine for the verification task. Moreover, we are obliged to develop the 
underlying theory in a more general setting where programs may involve invisible 
atoms, e.g., generated by LPARSE when compiling weight constraints. The basic idea 
is that such atoms should be neglected by equivalence relations but this is not the 
case for = and = s . To this end, we apply yet another equivalence relation, namely 
visible equivalence denoted by = v ll.Tanhunen 2nf)3lDanhunen 200611 . This relation is 
compatible with = in the sense that these equivalence relations coincide in the ab- 
sence of invisible atoms. In fact, we develop a translation-based verification method 
for = v and characterize the class of SMODELS programs for which the method is 
guaranteed to work by constraining the use of invisible atoms. This class is iden- 
tified as the class of programs possessing enough visible atoms. Most importantly, 
this property is shared by weight constraint programs produced by the front-end 
LPARSE during grounding. 

The rest of this paper is organized as follows. The rule-based syntax of logic 
programs supported by the current SMODELS system is described in Section 
It is then explained in Section how the semantics of such rules is covered by 
the stable model semantics proposed by Gelfond and Lifschitz (^SEEl • Section 0] 
introduces the notion of visible equivalence mentioned above. We perform a prelim- 
inary complexity analysis of the problem of verifying P = v Q for P and Q given 
as input. Unfortunately, recent complexity results IjEiter et al. 200511 suggest dis- 
couraging rises of complexity in the presence of invisible atoms. Thus we need to 
impose additional constraints in order to keep the verification problem in coNP; 
thus enabling the use of SMODELS as search engine in a feasible way. In Section EJ 
we present our translation-based method for verifying the visible equivalence of 
SMODELS programs. The correctness of the method is also addressed. The resulting 
complexity classifications are then concluded in Section l5~Tl Section concentrates 
on the case of weight constraint programs supported by the front-end lparse of the 
SMODELS system and shows how programs in the extended language are covered 
by the translation-based method. SectionQis devoted to experiments that we have 
performed with an implementation of the translation-based method, a translator 
called lpeq, and the SMODELS system. The results indicate that in certain cases 
verifying the equivalence of SMODELS programs using lpeq is one or two orders of 
magnitude faster than naive cross-checking of stable models. Finally, the paper is 
finished by a brief conclusion in Section |S1 

2 Programs in the SMODELS Language 

The goal of this section is to make the reader acquainted with the rule-based lan- 
guage supported by the current SMODELS system ( Simon s" et al. 20021 . Definition 

1 Turner JTurner 2003 J develops an analog ous tran sformation for weight constraint programs and 
strong equivalence. Moreover, |Eiter et al. (2004} cover the case of disjunctive programs under 
strong and uniform equivalence and present the respective transformations. 
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12.11 lists five forms of rules which constitute the knowledge representation primi- 
tives of the system. Besides basic rules I^Q of conventional normal logic programs, 
there are also other expressions such as constraint rules (2J , choice rules , weight 
rules Q , and compute statements © . These extensions have been carefully chosen 
to be directly and efficiently implementable in the search engine of the SMODELS 
system ^Simons et al. 2002)1 . It should be stressed that the front-end of the system, 
LPARSE ( jSyrjanen 200 1| , admits a more liberal use of constraint and weight rules 
( jSyrjanen 20040 but we postpone the discussion of such features until Section U3 

Definition 2.1 Rules are expressions of the forms 

h<— ai,...,a n ,~bi, ...,~6 TO (1) 

h<— c {oi, ...,a„,~6i,...,~6 TO } (2) 

{hi, . . . ,hi} <— ai, . . . ,a„, . . . ,~6 m (3) 

h «- w < {ai = w ai , . . . ,a„ = w an , ~&i = w bl , . . . ,~& m = w hm } (4) 

compute {ai, . . . ,a n , . . . ,~6 m } (5) 

where n > 0, m > 0, and I > 0, and where h, each ai, each bj, and each hk are 
atoms and c, each w ai , each Wb j , as well as w, are natural numbers. 

The symbol ~ occurring in Definition 12.11 denotes default negation or nega- 
tion as failure to prove which differs from classical negation in an important way 
( Gelf ond" and Lifschitz 199(1 . We define positive and negative default literals in the 
standard way as atoms a or their negations ~a, respectively. The exact model- 
theoretic semantics of rules is deferred until Section but — informally speaking 
— the rules listed above are used to draw conclusions as follows. 

• The head h of a basic rule Q can be inferred if the atoms at, . . . ,a n are 
inferable by other rules whereas the atoms b\, . . . ,b m are not. 

• The head h of a constraint rule <|2j can be inferred if the number of infer- 
able atoms among at, ■ ■ ■ ,a n phis the number of non-inferable atoms among 

,b m is at least c. 

• A choice rule is similar to a basic rule except that any subset of the non- 
empty set of head atoms {hi, . ■ . ,h{\ can be inferred instead of a single head 
atom h. Note that it is not necessary to infer any of the head atoms. 

• A weight rule (@J involves summing as follows: the weight w ai (resp. is 
one of the summands if and only if a« is inferable (resp. bj is not inferable). 
The head h can be inferred if such a sum of weights is at least w. 

• The default literals involved in a compute statement (3J act as direct con- 
straints saying that the atoms at, . . . ,a n should be inferable by some rules 
whereas the atoms b\, . . . ,b m should not. 

A couple of observations follows. A constraint rule becomes equivalent to a 
basic rule Q given that c = n + m. A weight rule Q) reduces to a constraint rule 
(2) when all weights are equal to 1 and w — c. Moreover, default literals may be as- 
signed different weights in different weight rules, i.e., weights are local in this sense. 
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The types of rules defined above are already well-suited for a variety of knowledge 
representation and reasoning tasks in a number of domains. Example [221 demon- 
strates the use of rules in a practical setting. The reader is referred to (Niemcla 1999 
|Marek and Truszczyhski 1999linimons et al. 2f)02HGelfond and Leone 2002H for more 
examples how to represent knowledge in terms of rules. 

Example 2.2 Consider the task of describing coffee orders using rules 2 introduced 
in Deftnition \2.1[ The nine rules given below form our formalization of this domain 
which should be self-explanatory. The compute statement in the end identifies the 
orders of interest to be those for which "acceptable" can be inferred. 

{coffee, tea, biscuit, cake, cognac}. 

{cream, sugar} <— coffee. 

cognac <— coffee. 

{milk, lemon, sugar} <— tea. 

mess <— milk, lemon. 

happy <— 1 {biscuit, cake, cognac}. 

bankrupt <— 6 < {coffee = 1, tea = 1, biscuit = 1, cake = 2, cognac = 4}. 
acceptable <— happy, ^bankrupt, ^mess. 
compute {acceptable}. 

We define a logic program P as a finite 3 set of ground rules of the forms Q 
© given in Definition 12.11 It follows that programs under consideration are fully 
instantiated and thus consist of ground atoms which are parallel to propositional 
atoms, or atoms for short in the sequel. The Herbrand base of a logic program P can 
be any fixed set of atoms Hb(P) containing all atoms that actually appear in the 
rules of P. Furthermore, we view Hb(P) as a part of the program which corresponds 
to defining a logic program as pair (P, Hb(P)) where Hb(P) acts as the symbol 
table of P. The flexibility of this definition has important consequences. First, the 
length \\P\ \ of the program, i.e., the number of symbols needed to represent P as a 
string, becomes dependent on |Hb(P)|. This aspect becomes relevant in the analysis 
of translation functions Ij.Tanhunen 2 006). Second, the explicit representation of 
Hb(P) enables one to keep track of atoms whose occurrences have been removed 
from a program, e.g., due to program optimization. For instance, the program 
({a <— ^b. }, {a, b}) can be rewritten as ({a. }, {a, b}) under stable model semantics. 

There is a further aspect of atoms that affects the way we treat Herbrand bases, 
namely the visibility of atoms. It is typical in answer set programming that only 
certain atoms appearing in a program are relevant for representing the solutions 
of the problem being solved. Others act as auxiliary concepts that might not ap- 
pear in other programs written for the same problem. As a side effect, the mod- 
els/interpretations assigned to two programs may differ already on the basis of aux- 
iliary atoms. Rather than introducing an explicit hiding mechanism in the language 

2 Rules are separated with full stops and the symbol "«— " is dropped from a basic rule UJ or a 
choice rule J3J if the body of the rule is empty (n = and m = 0). 

3 This reflects the fact that the theory being presented/developed here is closely related to an 
actual implementation, the smodels engine, which admits only finite sets of ground rules. 
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itself, we let the programmer decide the visible part of Hb(P), i.e., Hb v (P) C Hb(P) 
which determines the set of hidden atoms Hbh(P) = Hb(P) — Hb v (P). The ideas 
presented so far are combined as follows. 

Definition 2.3 A logic program in the SMODELS system (or an SMODELS program 
for short) is a triple (P, Hb v (P), Hbh(P)) where 

1. P is a finite set of rules of the forms - 

2. Hb v (P) and Hbh(P) are finite and disjoint sets of atoms and determine the visible 
and hidden Herbrand bases of the program, respectively; and 

3. all atoms occurring in P are contained in Hb(P) = Hb v (P) U Hbh(P). 

Finally, we define Hb a (P) as the set of atoms o/Hb(P) not occurring in P. 4 

Note that the atoms of Hb a (P) can be viewed as additional atoms that just 
extend Hb(P). By a slight abuse of notation, we often use P rather than the whole 
triple when referring to a program (P, Hb v (P), Hbh(P)). To ease the treatment 
of programs, we make some default assumptions regarding the sets Hb(P) and 
Hb v (P). Unless otherwise stated, we assume that Hb v (P) = Hb(P), Hbh(P) = 0, 
and Hb a (P) = 0, i.e., Hb(P) contains only atoms that actually appear in P. 

Example 2.4 Given P = {a <— ~6. }, the default interpretation is that Hb(P) = 
{a, b}, Hb v (P) = Hb(P) = {a,b}, and Hbh(P) = 0. To make an exception in this 
respect, we have to add explicitly that, e.g., Hb v (P) = {a, c} and Hbh(P) = {&}. 
Together with P these declarations imply that Hb a (P) is implicitly assigned to {c}. 

Generally speaking, the set Hb v (P) can be understood as a program interface 
of P and it gives the basis for comparing the program P with other programs of 
interest. The atoms in Hbh(P) are to be hidden in any such comparisons. 



3 Stable Model Semantics 



In this section, we review the details of stable model semantics proposed by Gelfond and Lifschitz (1988) 

Stable models were first introduced in the context of normal logic programs, i.e., 

logic programs that solely consist of basic rules JQ| , but soon they were generalized 

for other classes involving syntactic extensions. In addition to recalling the case 

of normal programs, it is also important for us to understand how the semantic 

principles underlying stable models can be applied to the full syntax of SMODELS 

programs introduced in Section [2j Yet another generalization will be presented in 

Section where the class of weight constraint programs is addressed. 

The class of normal programs includes positive programs that are free of default 
negation, i.e., m = for all rules of such programs. The standard way to 
determine the semantics of any positive program P is to take the least model of 
P, denoted by LM(P), as the semantical basis | |Lloyd 1987| |. This is a particular 



4 The atoms in Hb a (P) are made false by stable semantics to be introduced in Sectional 
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classical model of P which is minimal with respect to subset 5 inclusion and also 
unique with this property. Moreover, the least model LM(P) coincides with the 
intersection of all classical models of P. Consequently, an atom a G Hb(P) is a 
logical consequence of P in the classical sense if and only if a G LM(P). It is also 
important to realize that the semantic operator LM(-) is inherently monotonic: 
P C Q implies LM(P) C LM(Q) for any positive normal logic programs P and Q. 



Gelfond and Lifschitz (19881 show how the least model semantics can be gener- 
alized to cover normal logic programs. The idea is to reduce a normal logic program 
P with respect to a model candidate M by pre-interpreting negative literals that 
appear in the rules of P. The resulting program P M — also known as the Gelfond- 
Lifschitz reduct of P — contains a reduced rule h <— a%, . . . ,a n if and only if there 
is a rule (QJ in P so that the negative literals . . . ,^b m in the body are satisfied 
in M. This makes P M a positive program whose semantics is determined in the 
standard way, i.e., using its least model l |Lloyd 19 87). 



Definition 3.1 (Gelfond and Lifschitz (1988)) For a normal logic program P 



an interpretation M C Hb(P) is a stable model of P if and only if M = LM(P M ). 

For a positive program P, the reduct P M — P for any M C Hb(P) implying 
that LM(P) coincides with the unique stable model of P. Unlike this, stable models 
need not be unique in general: a normal logic program P may possess several stable 
models or no stable model at all. However, this is not considered as a problem 
in answer set programming, since the aim is to capture solutions to the problem 
at hand with the stable models of a program that is constructed to formalize the 
problem. In particular, if there are no solutions for the problem, then the logic 
programming representation is not supposed to possess any stable models. 



Simons (19991 shows how the stable model semantics can be generalized for the 
other kinds of rules presented in Section |2 However, the reduced program is not 
explicitly present in the semantical definitions given by him. This is why we resort to 
an alternative definition, which appears as D efinit ion 13 . 41 h elow . It will be explained 
in Section how the forthcoming definition can be understood as a special case of 



that given by Simons et al. (2002 1 for more general classes of rules. In contrast to 
their definitions that involve deductive closures of sets of rules, we define stable 
models purely in model-theoretic terms using the least model concept. 

Given a logic program P, an interpretation I is simply a subset of Hb(P) defining 
which atoms a are considered to be true (a G I) and which false (a $ I). By the 
following definition, we extend the satisfaction relation I \= r for the types of rules 
r under consideration. In particular, let us point out that negative default literals 
are treated classically at this point. 

Definition 3.2 Given an interpretation I C Hb(P) for an SMODELS program P, 

1. A positive default literal a is satisfied in I (denoted I \= a) <==> a G /. 

2. A negative default literal is satisfied in I (denoted I |= ~a) <^=^- I ^= a. 



5 It is assumed that interpretations are represented as sets of atoms evaluating to true. 



8 



T. Janhunen and E. Oikarinen 



3. A set of default literals L is satisfied in I (denoted I \= L) •<=>• 
I |= I for every I € L. 

4. A basic rule r of the form is satisfied in I (denoted I \= r) <^=> 
I |= {ai, . . . ,On, . . . ,~6 m } implies I \=h. 

5. ^4 constraint rule r of the form is satisfied in I (denoted I \= r) 
c < \{a-i | I H a i) u {~% I ^ H implies I \= h. 

6. ^4 choice rule r of the form 0) *s always satisfied in I. 

7. A weight rule r of the form is satisfied in I (denoted I \=r) <J=^ 

w < WSi(a 1 = w ai ,...,a n = w an ,~b 1 = Wb 1 ,---,~b m = Wb m ) 



J^ ai J|=~6 



(6) 



implies I \= h. 

8. j4 compute statement s of the form is satisfied in I (denoted I \= s) <^=> 
I |= {ai, . . . ,a„, ~&i, . . . ,~ b m }. 

9. j4 program P is satisfied in I (I \= P ) I \= r for every reP, 

The equality in 10 determines how weighted literal sets are evaluated. Given an 
interpretation I and an assignment of weights to default literals as in the body of a 
weight rule iQJ , the respective weight sum in © includes the weight of each literal 
true in /. This primitive will be needed a lot in the sequel to deal with weight rules. 



Example 3.3 The third but last rule of Exam,nle \2. 3\ is satisfied in an interpretation 
Ii = {tea, biscuit}, but not in I2 = {coffee, cake, cognac}. 

An interpretation I is a (classical) model of a logic program P if and only if / |= P. 
However, stable models are not arbitrary models of logic programs. As discussed in 
the beginning of this section, they involve a reduction of logic programs which is 
based on a pre-interpretation of negative literals. 

Definition 3.4 For an SMODELS program P and an interpretation I C Hb(P) of 
P, the reduct P 1 contains 

1. a basic rule h <— 01, . . . ,a n <J=^> there is a basic rule in P such that I \= 
{~&i, . . . , ~&m} or there is a choice rule 0) in P such that h £ {h\, . . . ,h{\ , 
I |= h, and I \= . . . , ~o m }; 

2. a constraint rule h <— c' {01, . . . ,a„} <^=> there is a constraint rule \2ty * n P an d 
d = max(0,c- | I f= ~6,}|); 

3. a weight rule h <— u;' < {ai = to ai , . . . ,a„ = w arl } <J=4> i/iere is a weight rule 
m P and w' — max(0, w — WSj(~6i = Wb ± , ■ ■ ■ = w b m ))j an d 

4. no compute statements. 

Note that in addition to evaluating negative literals in the bodies of rules, the 
head atoms h S {hi, . . . , /i;} of choice rules Q are subject to a special treatment: 
an essential prerequisite for including h <— ai,...,a„ in the reduct P M is that 
M |= h, i.e., /i G M. This is the way in which the choice regarding h takes place. 
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Moreover, it is clear by Definition l3.4l that the reduct P M is free of default negation 
and it contains only basic rules, constraint rules, and weight rules, but no compute 
statements. Thus we call an SMODELS program P positive if each rule r € P is of 
the forms JJJ, and J3J restricted to the case m = 0. The least model semantics 
can be generalized for positive programs by distinguishing their minimal models. 

Definition 3.5 A model M \= P of a (positive) SMODELS program P is minimal 
if and only if there is no M' |= P such that M' C M . 

Positive programs share many important properties of positive normal programs 
and the straightforward semantics based on minimal models and the least model is 
easily generalized for positive programs. 

Definition 3.6 For a positive SMODELS program P, we define an operator Tp : 
2 Hb(P) 2 Hb(P) as f oUows Given 

any interpretation I C Hb(P), the result of 
applying Tp to I, i.e., Tp(I) C Hb(P), contains an atom a € Hb(P) if and only if 

1. there is a basic rule a «— ai, . . . ,a n 6 P and / |= {ai, . . . , a„}; or 

2. i/iere is a constraint rule a <— c {a\, . . . ,a n } S P and c < |{oj | J |= } | ; or 

3. i/iere is a weight rule a <— u> < {ai = w ai , . . . ,a„ = u> a „} G P and 

w < WS/(ai = w ai , ...,a n = w an ). 

Intuitively, the operator Tp gives atoms that are necessarily true by the rules of 
P if the atoms in / are assumed to be true. It follows that Tp(I) C I implies I \= P 
in general. We are now ready to state a number of properties of positive programs. 

Proposition 3.7 Let P be a positive SMODELS program. 

1. For any collection C of models of P, the intersection f] C is also a model of P. 

2. The program P has a unique minimal model M, i.e., the least model LM(P) of P. 

3. The least model LM(P) = flU C Hb(P) | I \= P} and LM(P) = lfp(T P ). 

Moreover, positive programs are monotonic in the sense that Pi C P 2 implies 
LM(Pi) C LM(Pa). Given the least model semantics for positive programs, it be- 
comes straightforward to generalize the stable model semantics IIGelfond and Lifschitz 19881 
for programs involving default negation. The key idea is to use the reduction from 
Definition ^, 41 but the effect of compute statements must also be taken into account 
as they are dropped out by Definition ^. 41 To this end, we define CompS(P) as the 
union of literals appearing in the compute statements (JJJ of P. 

Definition 3.8 An interpretation M C Hb(P) is a stable model of an SMODELS 
program P if and only if M = LM(P M ) and AI \= CompS(P). 

Definition 13 .81 reveals the purpose of compute statements: they are used to select 
particular models among those satisfying the conventional fixed point condition 
from Definition 13. II Given any logic program P, we define the set 

SM(P) = {M C Hb(P) | M = LM(P M ) and M \= CompS(P)}. (7) 
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In analogy to the case of normal logic programs, the number of stable models may 
vary in general. A positive program P has a unique stable model LM(P) as P AI = P 
holds; recall that compute statements are not allowed in positive programs. It is also 
worth noting that M = LM(P M ) and M \= CompS(P) imply M \= P, i.e., stable 
models are also classical models in the sense of Definition l3.2l However, the converse 
does not hold in general, i.e., M \= P need not imply M — LM(P M ) although it 
certainly implies M |= CompS(P). For example, interpretations Mi = {a} and 
M 2 = {a, b} are models of the program P = {a <— 1 {~a, ^b}. }, but only M\ is 
stable. To verify this, note that P Ml = {a «- {}. } and P M2 = {a <- 1 {}. }. 

Example 3.9 Recall the program P from Example \2.SA According to SMODELS 
there are 33 acceptable orders that are captured by the stable models of P. One 
of them is Mr = {acceptable, happy, lemon, tea, biscuit}. The reader is kindly asked 
to verify M 7 = LM(P Mr ) and M 7 |= CompS(P) using the reduct P Mr listed below. 

tea. biscuit. 

cognac <— coffee. 

lemon *— tea. 

mess <— milk, lemon. 

happy <— 1 {biscuit, cake, cognac}. 

bankrupt <— 6 < {coffee = 1, tea = 1, biscuit = 1, cake = 2, cognac = 4}. 
acceptable <— happy. 



4 Notions of Equivalence 

We begin this section by reviewing two fundamental notions of equivalence that 
have been proposed for logic programs, namely weak and strong equivalence, and 
point out some of their limitations. This is why we resort to another notion of 
equivalence in Section l4~Tl visible equivalence is a variant of weak equivalence which 
takes the visibility of atoms better into account. Then we are ready to identify the 
respective verification problem in Section 14.21 and discuss in which way invisible 
atoms render the verification problem more difficult. This serves as a starting point 
for characterizing a subclass of programs for which visible equivalence can be verified 
using a translation-based technique in analogy to ( Janhun en and Oikarinen 2 002 ) . 



Lifschitz et al. (2001 1 address two major notions of equivalence for logic pro- 



grams. The first one arises naturally from the stable model semantics. 

Definition 4.1 Logic programs P and Q are weakly equivalent, denoted P = Q, 
if and only ifSM(P) = SM(Q), i.e., P and Q have the same stable models. 

The second notion is definable in terms of the first and the definition is given 
relative to a class of logic programs which is represented by R below. Of course, a 
natural choice for us would be the class of SMODELS programs but that is not made 
explicit in the following definition. 



Definition 4.2 Logic programs P and Q are strongly equivalent, denoted P = s Q, 
if and only if P U R= QU R for any logic program R. 
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Here the program R can be understood as an arbitrary context in which the 
other two programs P and Q being compared could be placed. This is how strongly 
equivalent logic programs can be used as semantics preserving substitutes of each 
other. This feature makes = s a congruence relation over the class of logic programs 
under consideration: if P = s Q holds, then also P U R = s Q U R holds for any 
R. Moreover, it is easy to see that P = s Q implies P = Q, but not necessarily 
vice versa: = s relates far fewer programs than = as demonstrated in Example 14.31 
This explains why we call = the weak equivalence relation for the class of logic 
programs introduced in Sections El and El It is worth pointing out that whereas = 
is an equivalence relation it does not permit substitutions (P = Q does not imply 
PL) R = Q U R in general) and hence it does not qualify as a congruence relation. 

Example 4.3 Consider P = {a <— } and Q = {a. }. It is easy to see that 
SM(P) = SM(Q) = {{a}} and P = Q. However, when joined with R = {b. }, we 
note that SM(P U R) ^ SM(Q U R) holds so that P^ S Q. The programs P and Q 
are not classically equivalent either as M (= P and M ^= Q hold for M — {b}. 

Although the relation = s appears attractive at first glance, a drawback is that it 
is quite restrictive, allowing only rather straightforward semantics-preserving trans- 



formations of (sets of) rules. In fact, Lifschitz et al. (2001 1 characterize = s in Heyt- 



ing's logic here-and-there (HT) which is an intermediary logic between intuitionistic 
and classical propositional logics. This result implies that each program transfor- 
mation admitted by = 8 is based on a classical equivalence of the part being replaced 
(say P) and its substitute (say Q), i.e., P = s Q implies that P and Q are classi- 
cally equivalent. However, the converse is not true in general as there are classically 
equivalent programs that are not strongly equivalent. 

Example 4.4 The propositional sentence a «-> (-<a — > a) is classically valid — 
suggesting a program transformation that replaces P = {a. } by Q = {a <— ~<z. }. 
However, since SM(P) = {{a}} and SM(Q) = 0, we have P ^ Q and P ^ s Q 
although P and Q are classically equivalent. 

Since = s is a congruence relation, it is better applicable to subprograms or program 
modules constituting larger programs rather than complete programs. In contrast to 
this, weak equivalence is mainly targeted to the comparison of complete programs 
in terms of their stable models. Due to the nature of ASP, this is often the ultimate 
question confronted by a programmer when optimizing and debugging programs. 
For this reason, we concentrate on the problem of verifying weak equivalence in this 
paper and we leave the modularization aspects of weak and visible equivalence to 
be addressed elsewhere I jOikarinen and ,Tanhunen" 2006 1 . 



4-1 Visible Equivalence 

We do not find the notion of weak equivalence totally satisfactory either. For P = Q 
to hold, the stable models in SM(P) and SM(Q) have to be identical subsets of 
Hb(P) and Hb(Q), respectively. This makes = less useful if Hb(P) and Hb(Q) 
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differ by some (in) visible atoms which are not trivially false in all stable models. 
As already discussed in Section such atoms are needed when some auxiliary 
concepts are formalized using rules. The use of such atoms/concepts may lead to 
more concise encodings of problems as demonstrated by our next example. 

Example 4.5 Consider the following programs consisting of basic rules, choice 
rules, and compute statements. The parameter n below is an odd natural number. 

Program P n : {biti, bit 2 , . . . , bit n }. 

odd «— biti, ~bit2, • ■ ■ , ~bit n . 

odd <— ~biti, bit2, ~bit 3 . . . , ~bit n . 

odd 
odd 

odd <— biti, . . . , bitn . 
compute {^odd}. 

Program Q n : {biti, bit 2 , . . . , bit„}. 
oddi <— biti. 

odd 2 <— bit2,~oddi. odd 2 <— ~bit 2 ,oddi. 

odd„ <— bit„, ~odd„_i. odd„ <— ~bit„,odd„_i. 
odd < — odd n . 
compute {^odd}. 

The first program generates all subsets B of BIT n = {biti, bit 2 , . . . , bit„}, an- 
alyzes when \B\ is odd, and accepts only subsets with non-odd (even) cardinality. 
Thus P n has T 1 ' 1 stable models M C BIT n with \M\ even but also 2™ 1 basic rules 
capturing subsets with odd cardinality. In contrast, huge savings can be achieved by 
introducing new atoms oddi, . . . , odd„ so that each oddi is supposed to be true if and 
only if \B (~]{b\ti, . . . , biti}| is odd. Using these, the oddness of\B\ can be formalized 
in terms of 2n basic rules. The resulting program Q n has 2 n ~ 1 stable models, but 
they are not identical with the stable models of Q n due to new atoms involved. Thus 
we have SM(Q„) ^ SM(P„) and Q n ^ P n for every odd natural number n. 

From the programmer's point of view, the programs P n and Q n solve the same 
problem and should be considered equivalent if one neglects the interpretations of 
oddi, • • • ,odd„ in the stable models of Q n . To this end, we adopt a slightly more 
general notion of equivalence ( Janhunen 2003 , Janhunen 2006 ) which takes the vis- 
ibility of atoms properly into account. The key idea is that when two programs P 
and Q are compared, the hidden atoms in Hbh(-P) and Hbh(Q) are considered to 
be local to P and Q and thus negligible as far as the equivalence of the programs 
is concerned. In addition to this feature, a very strict (bijective) correspondence of 
stable models is necessitated by the notion of visible equivalence. 



biti, bit 2 , bit 3 , ~bit 4 . . . , ~bit„. 
~biti, bit 2 , bit 3 , bit 4 , ~bit 5 . . . , ~bit„. 
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Definition 4.6 Logic programs P and Q are visibly equivalent, denoted P = v Q, 
if and only «/Hb v (P) = Hb v (Q) and there is a bijection f : SM(P) — > SM(Q) swcft 
i/iai for every M £ SM(P), M n Hb v (P) = /(M) n Hb v (Q), 

Proposition 4.7 TTie relation = v is an equivalence relation. 

By defining Hb v (P n ) = Hb v (Q n ) = PiT„ for the programs P n and Q„ defined 
in Examnle 14.51 we obtain an intuitive relationship Q n = v P„. The bijection / 
involved in this relationship maps a stable model M £ SM(Q n ) to another f(M) = 
M (~1 BIT n £ SM(P„). Our following example demonstrates the case in which both 
SM(P) and SM(Q) have stable models that cannot be distinguished if projected 
to Hb v (P) = Hb v (Q), i.e., there are stable models M, N £ SM(P) such that M n 
Hb v (P) = N n Hb v (P) and analogously for Q. However, this does not necessarily 
exclude the possibility for a bijection in the sense of Definition 14.61 

Example 4.8 Consider logic programs P = {a <— b. a <— c. b <— ~c. c <— ~6. } and 
Q = {{b, c}. a <— b,c. a «— ~6, ~c. 6 <— c, ~6. c <— 6, ~c. } wii/i Hb v (P) = Hb v (Q) = 
{a} and Hbh(P) = Hbh(Q) = {6,c}. The stable models of P are Mi = {a, 6} and 
Mi = {a, c} whereas for Q they are N± = {a} and N2 — {a, b, c}. Thus P ^ Q is 
clearly the case, but we have a bijection f : SM(P) — > SM(Q), which maps Mi to 
Ni for i £ {1, 2}, such that M n Hb v (P) = /(M) n Hb v (Q). Thus P = v Q holds. 

A brief comparison of = v and = follows. 

Proposition 4.9 // Hb(P) = Hb(Q) and Hb h (P) = Hb h (Q) = 0, ften P = Q 
^=> P-vQ. 

In words, the two relations coincide when all atoms are visible. There is only a 
slight difference: = v insists on Hb(P) = Hb(Q) whereas = does not. Nevertheless, 
it follows by D efinit ion 1 2 . 31 1 hat such a difference is of little account: Herbrand bases 
are always extendible to meet Hb(P) = Hb(Q). The value of these observations is 
that by implementing = v we obtain an implementation for = as well. We will follow 
this strategy in Sectional Moreover, it is also clear by Proposition 14.91 that = v is 
not a congruence for U and thus it does not support program substitutions like = s . 

Visible equivalence has its roots in the study of translation functions ij.Tanhunen 2003 
IJanhunen 2006|l and it was proposed as a faithfulness criterion for a translation 
function Tr between classes of programs, i.e., P = v Tr(P) should hold for all pro- 
grams P. The bijective relationship of stable models ensures that a faithful trans- 
lation (see Theorem 16.101 for an instance) preserves the number of stable models. 
This is highly desirable in ASP where stable models correspond to solutions of 
problems and the ability to count solutions correctly after potential program trans- 
formations is of interest. However, this is not guaranteed, if we consider weaker 
alternatives of = v obtained in a general framework based on equivalence frames 
IjEiter et al. 200511 . Visible equivalence does not really fit into equivalence frames 
based on projected answer sets. A projective variant of Definition 14.61 would simply 
impose {M n Hb v (P) | M £ SM(P)} = {N n Hb v (Q) | N £ SM(Q)} on P and Q 
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for P = vp Q to hold, which is clearly implied by P = v Q but not vice versa. The 
key observation is that a weakly faithful translation function Tr, i.e., Tr satisfies 
P = vp Tr(P) for all P, does not necessarily preserve the number of stable models — 
contradicting the general nature of ASP. As an illustration of these ideas, let us con- 
sider P — {a i— ~b. b <— ~a. } and Q n — Tr cxp (P) = P U {cj <— ~<ij. 



< i < n} where n > is a parameter of Tr cxp and Hb v (Q) = Hb v (P) = {a, b} 
by definition. It follows that SM(P) = {{a}, {6}} and Q„ has 2™ +1 stable models 
so that M n {a, 6} £ SM(P) holds for each M S SM(Q„). Therefore P = vp Q„ 
but P ^ v Qn hold for every n > 0, i.e., Tr oxp would be faithful only in the weaker 
sense. A drawback of translation functions like Tr cxp is that for sufficiently large 
values of n, it is no longer feasible to count the number of stable models of P using 
its translation Q n which is only polynomially longer than P. 

Equivalence relations play also a role in forgetting. Given a logic program P and 
a set of atoms F C Hb(P), the goal is to remove all instances of atoms of F from P 



but preserve the semantics of P as far as possible. Eiter and Wang (2006 1 provide 
an account of forgetting in the case of disjunctive logic programs. The result of 
forgetting fg(P, F) is not syntactically unique but its stable models are defined as 
the C-minimal elements of SM(P) \ F = {M\F \ Me SM(P)}. For instance, 
the program P„ in Example 14.51 is a valid result of forgetting if we remove F 
\ odd i . . . . , odd„} from Q n . We note that forgetting a set of atoms F is somewhat 
analogous to hiding F in P, i.e., setting Hbh(P) = F, but obvious differences are 
that Hb(fg(P, F)) n F = by definition and forgetting can affect the number of 



stable models in contrast to hiding. Nevertheless, Eiter and Wang (2006) show that 
forgetting preserves weak equivalence in the sense that P = Q implies fg(P, F) = 
fg(Q,P). This property is shared by = v in the fully visible case as addressed in 
Proposition 14.91 In general, we can establish the following. 

Proposition 4.10 If P = v Q, then fg(P,Hb h (P)) = fg(Q, Hb h (Q)). 



Proof 

Let us assume P = v Q which implies both Hb v (P) = Hb v (Q) and the exis- 
tence of a bijection / in the sense of Definition 14.61 Assuming fg(P, Hbh(P)) ^ 
fg(Q, Hbh(Q)), we derive without loss of generality the existence of a stable model 
M £ SM(fg(P,Hb h (P))) such that M SM(fg(Q,Hb h (Q))). Note that M is a 
subset of Hb(fg(P,Hb h (P))) = Hb v (P) = Hb v (Q) = Hb(fg(Q, Hb h (Q))) and a 
C-minimal element in SM(P) \ Hbh(P) defined in the preceding discussion. 

Then consider any M' € SM(P) such that M = M' \ Hb h (P). It follows by the 
properties of / that N' = f(M') e SM(Q) and N' n Hb v (Q) = M' n Hb v (P) = M. 
Thus M = N'\ Hb h (Q) belongs to SM(Q) \ Hb h (<2). Let us then assume that M 
is not C-minimal in this set, i.e., there is N £ SM(Q) \ Hbh(Q) such that N C M. 
Using the properties of / and the same line of reasoning as above for M' and N' 
but in the other direction, we learn that N £ SM(P) \ Hb h (P) holds for N C M. 
A contradiction, since M is C-minimal in this set. 

It follows that M is also a C-minimal element in SM(Q) \ Hbh(Q) so that M £ 
SM(fg(Q,Hb h (<9))), a contradiction. □ 
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function EqNaive(P, Q): Boolean; 1 

begin 2 

for M £ SM(P) do 3 

if M ^ LM(Q M ) 4 

then return false; 5 

for N G SM(Q) do 6 

if JV # LM(P Ar ) 7 

then return false; 8 

return true 9 
end 

(a) 



algorithm NotEq(P, Q); 
begin 

choose M C Hb(P) and AT C Hb(Q); 



if M = LM(P M ; 

then accept; 
if N = LM(Q N ) 

then accept; 
reject 
end 



and M LM{Q M 
and N / LM(P Ar ) 



(b) 



Fig. 1. A naive deterministic and a nondeterministic algorithm for verifying P = Q 
and P ^ Q, respectively, when Hb(P) = Hb(Q) and all atoms of P and Q are 
visible. 



4-2 Preliminary Analysis of the Equivalence Verification Problem 

The definition of stable models is based on the whole Herbrand base Hb(P) and 
hence it neglects which atoms are visible and which not. The weak equivalence rela- 
tion = is based on the same line of thinking and in ll.Tanhunen and Oikarinen 2 002 ) , 
we presented methods for verifying the weak equivalence of two programs P and Q 
satisfying Hb(P) = Hb(Q)- A relatively naive approach is to cross-check the sta- 
ble models in SM(P) and SM(Q) in order to establish SM(P) = SM(Q) and thus 
P = Q. The respective deterministic algorithm EqNaive is described in Figure^a). 6 



The algorithm may use any algorithm such as the one given by Simons et al. (2002 1 
for enumerating the stable models of P and Q one at a time. Due to FNP- 
completeness of the respective function problem (Simons et al. 2002jl , the compu- 
tation of each model may require time exponential in the length of input, i.e., 
||P|| or ||Q ||, The number of stable models to be cross-checked by a function call 
EqNaive(P, Q) can also be exponential. However, the tests for instability on lines 
4 and 7 can be clearly accomplished in polynomial time. This is because the least 
model LM(i?) of any positive set of rules R can be computed in time linear in ||P|| 



using a generalization of the procedure developed by Dowling and Gallier (1984). 

On the other hand, we get an upper limit for the computational time complexity 
of the equivalence verification problem by inspecting the nondeterministic algorithm 
presented in Figure H (b) • The idea is to select an interpretation M for P (line 3) 
and to verify that M is a counter-example to P = Q (lines 4-7) . Both tasks can be 
completed in time linear in ||P|| + ||Q||. Since IMotEq(P, Q) accepts its input in the 
nondeterministic sense if and only if P ^ Q, we see that the equivalence verifying 
problem is a problem in coNP. On the other hand, checking the existence of a 
stable model for a given logic program forms an NP-complete decision problem 
( Simo ns~et al. 2002jl . Thus one can establish the coNP-completeness of the veri- 



6 For the sake of brevity, compute statements are not covered by EqNaive. 
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fication problem by reducing the complement of the latter problem, i.e., checking 
that a logic program does not have stable models, to the problem of verifying that 
P is equivalent with {a <— ~a} — a program having no stable models. These obser- 
vations on computational complexity suggest an alternative computational strat- 
egy for solving the equivalence verification problem Q.Tanhunen and Oikarinen 2002 
Oikar men and Janhunen 2004[1 . The idea is that counter-examples for P = Q are 
explicitly specified in terms of rules and then proved non-existent using the same 
search algorithm as what is used for the computation of stable models. 

Unfortunately, further sources of complexity arise if we allow the use of hidden 
atoms in SMODELS programs and consider = v rather than =. To see this, let us 
analyze how the operation of Eq Naive should be modified in order to deal with 
invisible atoms. In fact, each cross-checking step has to be refined. It is no longer 
enough to compute a stable model M for P. In addition to this, we have to count 
how many stable models of P coincide with M up to Hb v (P), i.e., determine the 
number n = \{N £ SM(P) | N n Hb v (P) = M n Hb v (P)}|. Then it is sufficient to 
check that Q has equally many stable models that coincide with M up to Hb v (P) ■ 
This line of thinking applies directly to the pair of programs given in Example 14.81 

By numbering stable models in the order they are encountered, we obtain the 
basis for a bijective relationship as insisted by Definition 14.61 The bad news is that 
the computational complexity of counting models appears to be much higher than 
finding a model; see jRoth 1996jl for the case of prepositional satisfiability. Since 
classical models are easily captured with stable models IjNiemela 19991 . counting 
stable models of a logic program cannot be easier than counting satisfying assign- 
ments for a set of prepositional clauses. Thus the complexity of verifying = v appears 
to be very high in general and restrictions on visible atoms do not seem to provide 
us a way circumvent the counting problem: If Hb v (P) = Hb v (Q) = is assumed, 
then P = v Q if and only if P and Q have the same number of stable models. 

In order to avoid model counting as discussed above, we should restrict ourselves 
to logic programs P, for which the set {N e SM(P) | N D Hb v (P) = M n Hb v (P)} 
contains exactly one element for each M £ SM(P). Then stable models M,N £ 
SM(P) can be distinguished in terms of visible atoms: 

M =/= N implies M n Hb v (P) ^ N n Hb v (P). (8) 

Definition 4.11 Given an SMODELS program P, a set of interpretations C C 
2 Hb ( p ) i s separable with Hb v (P) if 0) holds for all M, N £ C, and we say that P 
has separable stable models j/SM(P) is separable with Hb v (P). 

Unfortunately, the separability of P and Q does not imply that EqNaive(P, Q) 
and NotEq(P, Q) work correctly as Hbh(P) and Hbh(Q) differ and may lead to un- 
necessary disqualification of models by the polynomial time tests M LM(Q M ) 
and N ^ LM(P N ). These tests capture correctly conditions M <£ SM(Q) and 
M SM(P), respectively, but when all atoms are visible. However, a higher com- 
putational complexity is involved in the presence of invisible atoms. E.g. the for- 
mer test would have to be replaced by a computation verifying that there is no 
N e SM(Q) such that M n Hb v (P) = N n Hb v (Q) holds. This tends to push 
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the worst case time complexity of the equivalence verification problem to the sec- 
ond level of polynomial time hierarchy l |Stockmeyer 1976j . Thus it seems that we 
need a stronger restriction than separability in order to keep the problem of ver- 
ifying P = v Q as a decision problem in coNP — an obvious prerequisite for the 
translation-based verification technique in i.Tanhunen and ()ikarinen~20 02). 

4-3 Programs Having Enough Visible Atoms 

In the fully visible case, the complexity of the verification problem is alleviated by 
the computation of least models in algorithm NotEq(P, Q). Those models are unique 
models associated with the respective Gelfond-Lifschitz reductions of programs and 
they provide the basis for detecting the (in)stability of model candidates. Having 
such a unique model for each reduct is the key property that we would like to carry 
over to the case of programs involving invisible atoms. To achieve this, we propose 
a semantical restriction for the class of logic programs as follows. Given a logic 
program P and a set of atoms A C Hb(P), we write A v and A^ for Al~lHb v (P) and 
AnHbh(P), respectively. Moreover, we are going to use shorthands A, B, and H for 
the respective sets of atoms {ax, . . . , a n }, {bi, . . . , b m }, and {hi, . . . ,h{\ appearing 
in rules (QJ 10. Analogously, the notations A = Wa and = Wb capture the 
sets of weights associated with A and B in the body of iQJ . The goal of Definition 
14.121 is to extract the hidden part F\/I v of an SMODELS program P by partially 
evaluating it with respect to an interpretation I v C Hb v (P) for its visible part. 

Definition 4.12 For an SMODELS program P and an interpretation I v C Hb v (P) 
for the visible part of P, the hidden part of P relative I v , denoted Ph/I v , contains 

1. a basic rule h <— A^^B^ there is a basic rule h «— A,^B in P such that 
h e Hbh(P) and I v \= A v U ~P V ; 

2. a choice rule {Ph} <— A\„^B\, ^=> there is a choice rule {H} <— A,^B in P 
such that Hh ^ and I v \= A v U ^B v ; 

3. a constraint rule h <— c' {Ah, ^B\,} there is a constraint rule h <— c {A, ^B} 
in P such that h £ Hb h (P) and d = max(0, c - \{l e A v U ~S V | I v \= l}\); 

4. a weight rule h «— w' < {A^ = Wa^^B^ = Wb^} ^=^~ there is a weight rule 
h^w<{A = W A , ~B = W b } in P such that h £ Hb h (P) and 

w' = max(0,w- WS/ V (A V = W Av ,~B v = W Bv )); (9) 

5. and no compute statements. 

This construction can be viewed as a generalization of the simplification opera- 
tion simp(P, T, F) proposed by Cholewinski and Truszczyhski 11999) to the case of 
SMODELS programs, but restricted in the sense that T and F are subsets of Hb v (P) 
rather than Hb(P). More precisely put, we have Ph// V = simp(P, J v , Hb v (P) — I v ) 
for a normal program, i.e., a set of basic rules P. 

Roughly speaking, our idea is to allow the use of invisible atoms as long as they 
do not interfere with the number of stable models obtained for the visible part. We 
consider the invisible part of a program "well-behaving" in this sense if and only if 
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M = LM((P h /P) M ) has a unique fixpoint M for every P C Hb v (P). In particular, 
it should be pointed out that Definition 14,121 excludes compute statements which 
are not supposed to affect this property (in perfect analogy to Definition 13.811 . 

Definition 4.13 An SMODELS program P has enough visible atoms if and only if 
Ph/P has a unique stable model for every P C Hb v (P ). 

This property can be achieved for any program by making sufficiently many 
atoms visible. To see this, consider Definition 14.121 when Hb v (P) = Hb(P) and 
Hbh(P) = 0: it follows that Ph/P = for which the existence of a unique stable 
model is immediate. Generally speaking, verifying the property of having enough 
visible atoms can be computationally quite hard in the worst case, but this property 
favorably trades off the complexity of verifying = v as we shall see in Section 

Proposition 4.14 Checking whether an SMODELS program P has enough visible 
atoms forms a coNP -hard decision problem EVA that belongs to II^. 

Here the language EVA consists of SMODELS programs that have enough visible 
atoms. For the proof, we introduce two further languages EVA- 1 and EVA- 1 . 
The former includes those SMODELS programs P for which Ph/P has at most one 
stable model for every P C Hb v (P). The latter is defined analogously, but at 
least one stable model for each Ph/P is demanded. It should be now clear that 
EVA = EVA- 1 n EVA- 1 which provides us a basis for complexity analysis. 

Proof of Proposition \4.14\ 

To show that EVA<i e coNP, we describe a nondeterministic Turing machine 
M > i that accepts the complement of EVA<i. Given a finite SMODELS program P 
as input, the machine M>i chooses nondeterministically two interpretations /, J C 
Hb v (P) and computes Q = Ph/Iv Then M>i checks in polynomial time that 
P = J v and Jh 7^ Jh as well as that both p and Jh are stable models of Q. If not, 
it rejects the input and accepts it otherwise. It follows that M>i accepts P in the 
nondeterministic sense if and only if P EVA<i. Hence EVA<i 6 coNP. 

The case of EVA>i is handled by presenting a nondeterministic machine Mq 
which uses an NP oracle and which accepts the complement of EVA>i. The ma- 
chine Mo chooses nondeterministically an interpretation P C Hb v (P) for the input 
P. Then it computes Ph/P and consults an NP-oracle (Si mons et al. 2002jl to 
check whether Ph/P has a stable model. If not, it accepts the input and rejects it 
otherwise. Given the oracle, these computations can be accomplished in polynomial 
time. Now Mq accepts P in the nondeterministic sense if and only if P EVA>i. 
Thus we have established that EVA>i 6 II^. 

We may now combine M>i and Mo into one oracle machine M that accepts an 
SMODELS program P <==> M>x accepts P or M accepts P. Equivalently, we have 
P £ EVA<i or P g EVA>i, i.e., P (EVA<i n EVA>i) = EVA. Since M is an 
oracle machine with an NP oracle, we have actually shown that EVA 6 II^. 

To establish coNP-hardness, we present a reduction from 3SAT to EVA. So let 
us consider an instance of SAT, i.e., a finite set S = {C\, . . . , C n } of three-literal 
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clauses Q of the form l\ V I2 V I3 where each U is either an atom a or its classical 
negation ->a. Each clause Cj is translated into a rule zt <— /i,/2,/3 where fi = a 
for ij = and /$ = ~a for = a. The outcome is an SMODELS program Ps which 
consists of clauses of S translated in this way plus two additional rules s <— ~w 
and x <— s, ~x. Moreover, we define Hb v (Ps) = Hb(S') and Hbh(-Ps) = {u, s,x} 
so that either (Ps)h/-P = { u - s <— ~it. a; <— s, or (Ps)h/P = {s <— a; <— 
s,^x} depending on P C Hb v (Ps), It follows that 5 G 3SAT there is 

an interpretation J C Hb(5) such that J (= 5 <^=^ there is an interpretation 
J v = J C Hb v (Pj) such that it does not appear as a fact in (Ps)h/P < ^=^ there 
is an interpretation I v C Hb v (Ps) such that (Ps)h/Iv has no stable models 
P5 has not enough visible atoms, since (Ps)h/P cannot have several stable models. 
Thus we may conclude EVA to be coNP-hard. □ 

Although the classification of EVA given in Proposition 14.141 is not exact, ex- 
ponential worst case time complexity should be clear. However, there are certain 
syntactic classes of logic programs which are guaranteed to have enough visible 
atoms and no computational efforts are needed to verify this. For instance, pro- 
grams P for which Ph/I v is always positive or stratified \Apt et al. 1988| l in some 
sense. Note that such syntactic restrictions need not be imposed on the visible part 
of P which may then fully utilize expressiveness of rules. 

Example 4.15 Consider logic programs P = {a <— b. }, Q = {a <— c. c <— b. }, 

and R = {a< c. c < d. d <- b. } with Hb v (P) = Hb v (Q) = Hb v (P) = {a, b}. 

Given I v = 0, the hidden parts are Ph/P = 0, Qh/Iv = 9, and Ph/P = {c <— 
} for which we obtain unique stable models Alp — Mq = and Mr = {c}. On 
the other hand, we obtain Ph/J v = 0, Qh/ Jv — {c. }, and Rh/J v = {c <— ~ci. d. } 
for J v = {a, b}. Thus the respective unique stable models of the hidden parts are 
N P = and N Q = {c}, and N R = {d}. 

Next we relate the property of having enough visible atoms with the model sep- 
aration property. The proof of Lemma, 14. 161 takes place in |Appendix A| 

Lemma 4.16 Let P be an SMODELS program. If M C Hb(P) is a stable model of 
P, then Mh is a stable model of Ph/M v as given in Definition ^ 

Proposition 4.17 Let P be an SMODELS program. If P has enough visible atoms, 
then P has separable stable models. 

Proof 

Suppose that P is an SMODELS program which has enough visible atoms but SM(P) 
is not separable with Hb v (P). Then there are two stable models TV, M G SM(P) such 
that M v = N v but M h ^ N h . Thus M h and iV h are stable models of P h /M v = P h /N v 
by Lemma 14.161 A contradiction as P has enough visible atoms. □ 

The converse of Proposition 14. 1 71 does not hold in general. Consider, for instance 

P = {a < a. b <- a, -6. } with Hb v (P) = {a}. Since SM(P) = 0, it is trivially 

separable with Hb v (P). But for I v — {a} C Hb v (P), the hidden part Ph/P = {b <— 
~6. } has no stable models and thus P does not have enough visible atoms. 
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5 Translation-Based Verification 

In this section, we concentrate on developing a translation-based verification tech- 
nique for visible equivalence, i.e., the relation = v introduced in Section 0] Roughly 
speaking, our idea is to translate given SMODELS programs P and Q into a single 
SMODELS program EQT(P, Q) which has a stable model if and only if P has a 
stable model M for which Q does not have a stable model N such that M v = N v . 
We aim to use such a translation for finding a counter-example for P = v Q when 
Hb v (P) = Hb v (Q) and both P and Q have enough visible atoms. Note that if 
Hb v (P) ^ Hb v (Q), then P ^ v Q follows directly by Definition As already dis- 
cussed in Section we need the property of having enough visible atoms to trade 
off computational complexity so that a polynomial translation is achievable. The 
good news is that the programs produced by the front-end LPARSE have this prop- 
erty by default unless too many atoms are explicitly hidden by the programmer. 
Our strategy for finding a counter-examples M is based on the following four steps. 

1. Find a stable model M G SM(P) for P. 

2. Find the unique stable model for Qh/M v . 

3. Form an interpretation N — M v U Nh- 

4. Check that N SM(Q), i.e., N ^ LM(Q N ) or N \/= CompS(Q). 

Here the idea is that the uniqueness of with respect to M v excludes the 
possibility that Q could possess another stable model N' ^ N such that M v = Ny. 
This follows essentially by Lemma OTA if N' G SM(Q) were the case, then 
would be unique for = M v = N v , i.e., = N h and N = N'. 

In the sequel, we present a translation function EQT that effectively captures 
the four steps listed above within a single SMODELS program EQT(P, Q). In order 
to combine several programs in one, we have to rename atoms and thus introduce 
new atoms outside Hb(P) U Hb(Q): 

• a new atom a° for each atom a € Hbh(Q) and 

• a new atom a* for each atom a S Hb(Q). 

The former atoms will be used in the representation of Qh/M v while the latter are 
to appear in the translation of Q , The intuitive readings of a° and a* are that 
a G iVh and a € LM(Q N ) hold, respectively. For notational convenience, we extend 
the notations a and a* for sets of atoms A as well as sets of positive rules R in the 
obvious way. For instance, A° denotes {a° | a G A} for any A C Hbh(Q). 

Definition 5.1 Let P and Q be SMODELS programs such that Hb v (P) = Hb v (Q). 
The translation EQT(P, Q) = P U Hidden (Q) U Least* (Q) U UnStable(Q) extends 
P with three sets of rules to be made precise by Definitions \5.2l\5.4\ Atoms c, d, 
and e introduced in Definition \5.4\ are assumed to be new. 

As regards our strategy for representing counter-examples, the rules in the trans- 
lation EQT(P, Q) play the following roles. The rules of P capture a stable model 
M for P while the rest of the translation ensures that Q does not have a stable 
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model N such that M v — N v . To make the forthcoming definitions more accessi- 
ble for the reader, we use simple normal programs P = {a <— ~6. b <— ~a. } and 
Q = {a «— 6, ~a. 6 <— ~a. } with Hb v (P) = Hb v (Q) = {a} as our running example. 
The rules contributed by Definitions I5.1H5.4I are collected together in Fig. |2j 

Definition 5.2 The translation Hidden (Q) of an SMODELS program Q contains 

1. a basic rule h° <— A^,A V , ~-B^, ~_B V /or eac/i basic rule 
h<— A, ~B in Q with h G Hb h (<2); 

2. a constraint rule h° <— c {^4°,, v4 v , ~-B£, ~-B v } /or eac/i constraint rule 
h •*— c {A, -5} m Q u/ifli ft G Hb h (Q); 

3. a choice rule {H^} <— A ,, A v , ~.B£, ~£? v /or eac/i choice rule 
{H} <- A, ~5 in Q twii/i i? h ^ 0; and 

4. a H/eipfti rtiZe h° <- w < {A° = H^o,A v = M^4 V ,~S° = Wb°,~.B v = VF Bv } /or 
eac/i weight rule h <~ w < {A — Wa, ^B = Wb} in Q with h G Hbh(Q). 

The translation Hidden" (Q) includes rules which provide a representation for the 
hidden part Qh/M v which depends dynamically on M v . This is achieved by leaving 
the visible atoms from Hb v (Q) = Hb v (P) untouched. However, the hidden parts of 
rules are renamed systematically using atoms from Hbh(Q) . This is to capture the 
unique stable model of Qh/M v but renamed as N£. 7 In our running example, 
the program Q has only one rule with a hidden atom 6 in its head and that rule 
gets translated into 6° «— due to the visibility of a. 

Definition 5.3 The translation Least* (Q) of an SMODELS program Q consists of 

1. a rule h* <— A', ~B V , ~B^ for each basic rule h <— A, ~B in Q; 

2. a rule h° <— c {A*, ~S V , ~B^} for each constraint rule h <— c {A, ~B} in Q; 

3. a rule h" <-A'\J {h}, ~B V , ~B° (resp. h' <- A' U {h°}, ~B V , ~B°J /or eac/i c/ioice 
n/Ze {H} <— A, m Q and /lead aiom /i G i? v ('resp. /i G Hh); and 

4. a rwZe h* <— w < {A' = Wa- , ~B V = Wb v , ~B^ = Wb° } for each weight rule 

w < {A = W A ,~B = W B } in Q. 

The rules in Least* (Q) catch the least model LM(Q N ) for N = M v U N h but 
expressed in Hb(Q)* rather than Hb(<2). Note that N is represented as M v U 
which explains the treatment of negative body literals on the basis of visibility 
in these rules. Two rules result for our running example. The negative literal ~a 
appearing in the bodies of both rules is not subject to renaming because a is visible. 

Definition 5.4 The translation UnStablc(Q) of an SMODELS program Q includes 

1. rules d <— a, ~a* and d <— a* , for each a G Hb v (Q); 

2. rules d <— a°, ~a* and d <— a*, ~s° /or eac/i a G Hbh(Q); 

3. a rule c <— ~a*, ^d for each positive literal a G CompS(Q); 



7 For the sake of simplicity, it is assumed that Q does not involve compute statements referring 
to invisible atoms in order to achieve the property of having enough visible atoms. 
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P 

Hidden (Q) 
Least* (Q) 
UnStable(Q) 



-ia. 



a «— b ■ 

b° ~a. 
a' <— b' , ~a. 6* 
d <— a, ~a*. d <— a*, ~a. 
d^b°,^b*. d^b*,^b° 
e <— c. e <— d. 



compute {e}. 



Fig. 2. The rules of the translation EQT(P, Q) for P = {a <- 
Q = {a <— 6, ~a. 6 <— <~a. } where a is visible and b is hidden. 



-6. 6 



} and 



4. a raZe c <— b', ~d /or eac/i negative literal ~b G CompS(Q); 

5. raZes e <— c and e «— d; and 

6. a compute statement compute {e}. 

The purpose of UnStable(<5) is to disqualify ./V as a stable model of Q. The rules 
in Items and El check if N and LM(Q N ) differ. If not, then the rules in Items 
and 21 check if LM(Q N ) violates some compute statement of Q. The rules in Item 
summarize the two possible reasons why Q does not have a stable model N such 
that M v = N v . This is then insisted by the compute statement in ItemE! In our 
running example, the program Q is free of compute statements and hence only rules 
for d and e are included in the translation. 

Example 5.5 The translation EQT(P, Q) given in Fig. [H has two stable models 
{a, d, e} and {6, b°, a*, b* , d, e} from which we can read off counter-examples M\ — 
{a} and M-x = {b} for P = v Q and the respective disqualified interpretations for 
Q, i.e., Ni = {a} and N 2 = {b}. The models LM(Q Nl ) = and LM(Q N2 ) = {a,b} 
are also easy to extract by projecting the stable models o/EQT(P, Q) with {a*, b'}. 

As regards the translation EQT(P, Q) as whole, we note that Hb(EQT(P, Q)) 
equals to Hb(P) U Hbh(Q) U Hb(Q)' U {c, d, e}. Moreover, the translation is close 
to being linear. Item in Definition 15.11 makes an exception in this respect, but 
linearity can be achieved in practise by introducing a new atom b r for each choice 
rule r. Then the rules in the fourth item can be replaced by h' <— h, b r (resp. 
h* <— h°,b r ) and b r <— A* ,~B V ,~B^. However, we use the current definition in 
order to avoid the introduction of further new atoms. 

Let us then address the correctness of the translation EQT(P, Q). We begin by 
computing the Gelfond-Lifschitz reduct of the translation EQT(P, Q). 

Lemma 5.6 Let P and Q be two SMODELS programs such that Hb v (P) = Hb v (Q) 
and I C Hb(P) U Hb h (Q)° U Hb(Q)' U {c, d, e} an interpretation of EQT(P, Q). 
Moreover, define M = ZnHb(P), N h = {a G Hb h (Q) | a G /}, N = M v UN h , and 
L = {ae Hb(Q) | a* G /} so that N° = I n Hb h (Q)° and L* = I D Hb(Q)V 

The Gelfond-Lifschitz reduct EQT(P, Q) 1 consists of P M extended by reducts 
Hiddcn°(Q) 7 , Least*(Q) / , and UnStable(<5) / specified as follows. 

First, the reduct Hidden (Q) 1 includes 
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1. a rule h° «— A£, A v •<=>• there is a basic rule h «— A,^B in Q such that h G 
Hb h (Q), andN \= ~P; 

2. a rw/e 7i° «- c' {A£, A v } where d = max(0, c - \{b G B \ N |= there is 
a constraint rule h <— c {A, ~P} in Q such that h G Hbh(Q); 

3. a rule h° <— A^,A V <^=> £/iere is a choice rule {H} «— A, ~P m Q smc/i iftai 
he H h ^ 0, AT h |= /i, and TV |= ~B; and 

4. a r?/Ze /i° <- to' < {A° = W A °,A V = W A J where w' = max(0,u; - WSat(~P = 
Wb)) < ^=^ there is a weight rule h «— w < {A = Wa, ~B = Wb} in Q such that 
/»€Hbh(Q). 

Second, the reduct Least* (Q) 7 consists of 

5. a rule /i" <— A* iftere is a &asic rule h <— A, ^B in Q such that N \= ^B; 

6. a rule h* <— c' {A'} where d — max(0,c — \{b G B \ N |= iftere is a 
constraint rule h <— c {A, ^B} in Q; 

7. a rule h* <— A* U {/i} (Vesp. /i" <— A* U {/i }J iftere is a choice rule {H} <— 
A, ~P m Q with h G P v (Vesp. h G iJh^ swc/i i/iai N \= ^B; and 

8. a rule h' <- u/ < {A* = w/iere u/ = max(0,u; - WSat(~P = W B )) 
there is a weight rule h w < {A — Wa, = Wb} in Q. 

Third, the set UnStable(Q) 7 contains 

9. a rule d <— a there is a G Hb v (Q) such that L \J= a; 

10. a rule d <— a° there is a £ Hbh(<5) such that L \£ a; 

11. a rule d <— a' there is a G Hb(Q) such that N \£ a; 

12. the fact c <— there is a G CompS(<5) such that L^= a and I y= d; 

13. a rule c «— b* ^==> there is ^b G CompS(Q) and I ^= d; and 

14. the rules e <— c and e <— d. 

Lemma 15.61 can be easily verified by inspecting the definition of the translation 
EQT(P, Q) (Definitions IFi.lHri.4jl rule by rule and using the definitions of M, N, 
and L as well as the generalization of Gelfond-Lifschitz reduct for the various rule 
types fDefinition I3.4jl . The following proposition summarizes a number properties 
of LM(EQT(P, Q) 1 ) which are used in the sequel to prove our main theorem. 

Proposition 5.7 Let P, Q, L, M, N, and L be defined as in Lemma \5. 61 Define 
conditions (i) M = LM(P M ), (ii) N h = LM((Q h /M v ) Ni >), and (Hi) L = LM(Q N ). 

1. LM(EQT(P, Q) 1 ) n Hb(P) = LM(P M ). 

2. // (%), then LM(EQT(P,Q) / ) nHb h (g)° = LM((Q h /M v )^)° . 

3. // (i) and (ii), then LM(EQT(P, Q) 1 ) n Hb(Q)* = LM(Q N )\ 

4. If (i), (ii), and (Hi), then the set of atoms A — LM(EQT(P, Q) 7 ) n {c, d, e} satisfies 

(a) d G A N ^ L, 

(b) c G A d<£I and L CompS(Q), and 

(c) e G A <=> c G A or d G A. 

Theorem 5.8 Let P andQ be two SMODELS programs such thatWa v (P) = Hb v (Q) 
and Q has enough visible atoms. Then the translation EQT(P, Q) has a stable model 
if and only if there is M G SM(P) such that for all N G SM(Q), iV v ^ M v . 
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The proofs of Proposition 15.71 and Theorem 15.81 are given in |Appendix A| As a 
corollary of Theorem 15.81 we obtain a new method for verifying the visible equiva- 
lence of P and Q. Weak equivalence = is covered by making all atoms of P and Q 
visible which implies that the programs in question have enough visible atoms. 

Corollary 5.9 Let P and Q be two SMODELS programs so that Hb v (P) = Hb v (Q) 
and both P and Q have enough visible atoms. Then P = v Q if and only if the 
translations EQT(P, Q) and EQT(Q, P) have no stable models. 

5.1 Computational Complexity Revisited 

In this section, we review the computational complexity of verifying visible equiv- 
alence of SMODELS programs using the reduction involved in Theorem 15.81 First, 
we will introduce languages corresponding to the decision problems of our interest 
and analyze their worst-case time complexities. The main goal is to establish that 
the verification of visible equivalence forms a coNP-complete decision problem for 
SMODELS programs that have enough visible atoms. 

Definition 5.10 For any SMODELS programs P and Q, 

• P £ SM there is a stable model M G SM(P); 

• (P,Q) e IMPR ^ Hb v (P) = Hb v (Q) and for each M e SM(P), there is 
N e SM(Q) such that N v = M v ; 

• (P, Q) e IMPL <s=^ (Q, P) e IMPR; and 

• (P,Q) eEQV <^> P= V Q. 

The computational complexity of SM is already well-understood: it forms an NP- 
complete decision problem fMarek and Truszczyhski 1991|ISimons et al. 2002|l and 
thus its complement SM is coNP-complete. 

Theorem 5.11 IMPR, IMPL, and EQV are coNP- complete decision problems 
for SMODELS programs having enough visible atoms. 

Proof 

Let us establish that (i) IMPR e coNP and (ii) SM can be reduced to IMPR. 

(i) Let P and Q be two SMODELS programs having enough visible atoms. Then define 
a reduction r from IMPL to SM by setting r(P, Q) = EQT(P, Q) if Hb v (P) = 
Hb v (Q) and r(P, Q) — otherwise. To justify that r(P,Q) can be computed in 
polynomial time we make the following observations. The condition Hb v (P) = 
Hb v (Q) can be verified in linear time if atoms in Hb v (P) and Hb v (Q) are or- 
dered, e.g., alphabetically. If not, sorting can be done in time of O(nlogn) where 
n = max(|Hb v (P)|, |Hb v (<5)|). Moreover, we can identify four subprograms of 
EQT(P, Q), i.e., P, Hidden°(Q), Least'(Q), and UnStable(Q) in Definition O 
whose lengths depend mostly linearly on ||P||, ||Q||, and |Hb(Q)|, respectively. 
The rules of Item make the only exception with a quadratic blow-up. 
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It follows by Definition PHI and Theorem El that (P, Q) e IMPR <^ r(P, Q) £ 
SM, i.e., r(P, Q) E SM. Since SM E coNP ijSimons et al. 200211 and r is a poly- 
nomial time reduction from IMPR to SM, IMPR E coNP. 
(ii) Let R be any SMODELS program. Now R E SM R £ SM SM(R) = 0. 

Then consider any SMODELS program _L having no stable models, i.e., SM(_L) = 0, 
with a visible Herbrand base Hb v (_L) = Hb v (P). It follows that SM(R) = ^> 
(R, J_) E IMPR. Thus R E SM (P, JL) e IMPR. 

Items (i) and (ii) above imply that IMPR is coNP-complete. The classification 
of IMPL follows by a trivial reduction (P,Q) E IMPR ^> (Q,P) E IMPL 
that works in both directions, i.e., from IMPR to IMPL and back. 

The case of EQV follows. Definitions H2fl and KWl imply that (P, Q) € EQV 
«=> (P, Q) E IMPR and (P, Q) € IMPL. Thus EQV = IMPR n IMPL and 
EQV E coNP as coNP is closed under intersection. The coNP-hardness of EQV 
follows easily as it holds for any SMODELS program R and a trivial SMODELS program 
_L with SM(J_) = and Hb v (_L) = Hb v (P) that R E SM <=^> (R,±) E EQV. 
Thus we may conclude that EQV is coNP-complete. □ 



6 Weight Constraint Programs 

The verification method presented in Section covers the class of SMODELS pro- 
grams as defined in Sectional This class corresponds very closely to the input lan- 
guage of the SMODELS search engine but it excludes optimization statements which 
will not be addressed in this paper. In this section we concentrate on extending our 
translation-based verification method for the input language supported by the front- 
end of the SMODELS system, namely LPARSE (Syrjanen 2001, Syrjan en and Niemela 2001) 1, 
The class of weight constraint programs ( Simons et al. 2002)1 provides a suitable 



abstraction of this language in the propositional case. Simons et al. (2002) show 
how weight constraint programs can be transformed into SMODELS programs using 
a modular translation that introduces new atoms. Our strategy is to use this trans- 
lation to establish that the weak equivalence of two weight constraint programs 
reduces to the visible equivalence of the respective translations. 

Next we introduce the syntax and semantics of weight constraint programs. Re- 
calling the syntax of weight rules J3J , a natural way to extend their expressiveness 
is to allow more versatile use of weights as well as constraints associated with them. 
This is achieved by recognizing weight constraints as first-class citizens and using 
them as basic building blocks of rules instead of plain atoms. 

Definition 6.1 A weight constraint C is an expression of the form 

I < {oi = w ai , . . . , a n = w an , ~&i = w bl , . . . , ~6 m = w bm } < u, (10) 
where at 's and bj 's are atoms, and I, u, w ai 's, and w bj 's are natural numbers. 



Since lparse is responsible for instantiating variables and pre-interpreting certain function 
symbols the input language is actually much more general. 
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As before, we use a shorthand I < {A = Wa^B = Wb} < u for a weight 
constraint 111 Oil where A — {<zi, . . . , a n } and B = {61, . . . , b m } are the sets of atoms 
appearing in the constraint. The numbers I and u give the respective lower and 
upper bounds for the constraint. Definition 16. II can be extended to the case where 
integers rather than natural numbers are used as weights. However, negative weights 
can be translated away ijSimons et al . 2002) from weight constraints. 

Definition 6.2 A weight constraint rule is an expression of the form 

Co^d,...,a (11) 

where C{ is a weight constraint for each is{0,...,r}. 

A weight constraint program is a program consisting of weight constraint rules. 
As a weight constraint rule ltTT|l is a generalization of a weight rule Q , we can define 
the satisfaction relation for weight constraint programs in analogy to Definition l3.2l 

Definition 6.3 For a weight constraint program P and an interpretation I C 
Hb(P), 

1. a weight constraint C of the form I < {A — Wa, ^B — Wb} < u is satisfied in I 
^ I < WSi(A = W A ,~B = W B ) < u, 

2. a weight constraint rule of the form Cq <— C\, . . . ,C r is satisfied in I I |= Co 
is implied by I |= C\, . . ., and I \= C r , and 

3. I |= P I \= r for every weight constraint rule reP. 



The stable model semantics of normal programs Gelfond and Lifschitz (19881 can 



be generalized to the case of weight constraint programs using the reduction devised 



for them by Simons et al. (2002). 



Definition 6.4 Given an interpretation I for a weight constraint C of the form 
I < {A = W A ,~B = W B } < u, the reduct C 1 is the constraint V < {A = W A } 
where the lower bound V — max(0, 1 — WS/(~B = Wb))- 

Definition 6.5 For a weight constraint program P and an interpretation I C 
Hb(P), the reduct P 1 contains a reduced weight constraint rule h <— C[, . . . ,C£ 
for each Cq <— Cx,...,C r G P and h G Aq n I satisfying for all i G {1, . . . , r}, 
WSi(Ai = W At ,~Bt = W Bi ) < Ui. 

It should be pointed out that P 1 consists of Horn constraint rules of the form 
h <— Ci,...,CV, where h is an atom, each constraint C, contains only positive 
literals and has only a lower bound condition. We say that a weight constraint 
program P is positive if all the rules in P are Horn constraint rules. Thus P 1 is 
positive by definition. The properties of minimal models carry over to the case of 
weight constraint programs, too. Thus a positive weight constraint program P has 
a unique minimal model, the least model, LM(P), and we can define stable models 
for weight constraints programs almost in analogy to SMODELS programs. 



Theory and Practice of Logic Programming 



27 



Definition 6.6 An interpretation M C Hb(P) for a weight constraint program P 
is a stable model of P (i) M \= P and (ii) M = LM{P M ). 

This definition is only slightly different from Definition 13.81 as M \= P 
M |= P M does not hold generally for weight constraint programs — making condi- 
tion (i) in Definition 16, 61 necessary. However, if we consider the restricted language 
described in Section and interpret the rules involved as weight constraint rules 
111 If . then Definitions 13.81 and lfi.fil yield the same semantics as stated below. To this 
end, we consider only choice rules © and weight rules Q without loss of gener- 



ality. Simons et al. (2002 1 encode rules of these forms using the following weight 



constraint rules: 
<{Ai = 1,. ..,&, = 

n + m<{ai = l,...,a n = l, ~6i = 1, . . . = 1} (12) 



1 < {h = 1} <— w < {ai = w ai ,...,a n = w an ,~b 1 = w bl , ■ ■ ■ ,~b m = w bm } (13) 

Proposition 6.7 Let P be an SMODELS program and P w its representation as a 
weight constraint program. Then for any interpretation M C Hb(P) = Hb(P w ), 

M = LM(P M ) M\=P W and M = LM(P* f ). 



The proof of this proposition is given in |Appendix A| Simons et al. (2002) show 



how weight constraint programs can be translated into SMODELS programs consist- 
ing only of basic rules Q , choice rules (0) and weight rules (@J . The translation is 
highly modular so that each weight constraint rule can be translated independently 
of each other. However, in order to keep the length of the translation linear, two new 
atoms have to be introduced for each weight constraint appearing in a program. 

Definition 6.8 The translation TrsNs(C) of a weight constraint C of the form 
I < {A = Wa-i = Wb} < u is translated into two weight rules 

sat(C) <- I < {A = W A , ~P> = W B }. (14) 
unsat(C) <- u+ 1 < {A = W A ,~B = W B }- (15) 

where sat(C) and unsat(C) are new atoms specific to C. 

Definition 6.9 Let P be a weight constraint program and f $ Hb(P) a new atom. 
The translation of P into an SMODELS program Ttsns(P) consists of 

1. TrsNs(C) for each weight constraint C appearing in P and 

2. the following SMODELS rules introduced for each Co <— Ci, . . . , C r G P: 

{A } <— sat(Ci), ~unsat((7i), . . . , sat(C r ), ^unsat(CV). (16) 

/ <— ~sat(Co), sat(Ci), ^unsat(Ci), . . . , sat(C r ), ~unsat(C r ). (17) 

/ <— unsat(Co), sat(Ci), ~unsat(Ci), . . . ,sat(C r ), ~unsat(C r ). (18) 

compute {~/}. (19) 
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where Aq is the set of positive default literals appearing in Cq. 

The visible Herbrand base of TrsNs(P) is defined by Hb v (TrsNs(P)) = Hb v (P). 

Let us then briefly explain intuitions underlying TrsNS- The rules given in l|Tlj) 
and 11511 check whether the lower bound I of the weight constraint C is satisfied the 
upper bound u of C is not satisfied, respectively, and then sat(C) and unsat(C) 
can be inferred by the rules accordingly. The choice rule in 11 (ill makes any subset 
of Aq true if the body of the weight constraint rule is satisfied in the sense of 
Definition 16.31 i.e., all lower bounds and upper bounds are met. Finally, two basic 
rules in II17J1 and 1180 and the compute statement in 11911 ensure the satisfaction 
of the head constraint Cq whenever the body Ci, . . . ,C r is satisfied. A very tight 
correspondence of stable models is obtained using the translation TrgNs(P)- 

Theorem 6.10 The translation function TrgNS is faithful, i.e., P = v TrsNs(P) 
holds for all weight constraint programs P. 

The proof of the theorem can be found in |Appendix A| Theorem 16 . 1 01 and Defi- 
nition l6~9l imnlv together that the visible equivalence of weight constraint programs 
can be reduced to that of SMODELS programs using TrsNS- 

Corollary 6.11 For all weight constraint programs P and Q, 

P= V Q <==> TrsNs(P) =v TrsNs(Q). 

However, we have to address the degree of visibility of atoms in the translation 
TrsNs(-P) in order to apply the translation-based method presented in Section 
Recalling the limitations of the method, we should establish that TrsNs(P) and 
TrsNs(Q) have enough visible atoms under some reasonable assumptions about P 
and Q. For the sake of simplicity, we will only consider a relatively straightforward 
setting made precise in Proposition 16.121 Nevertheless, it implies the applicability 
of our verification method to a substantial class of weight constraint programs. 

Proposition 6.12 If P is a weight constraint program such that Hbh{P) = 0, then 
Ti'sns(-P) has enough visible atoms. 

Proof 

Let P be any weight constraint program such that Hbh(-P) = 0, i.e., Hb v (P) = 
Hb(P). Moreover, let us pick any interpretation I v C Hb v (P). Since Hbh(P) = 
we have I v — I so that I is actually an interpretation for the whole program. 

Let us then consider any rule Co <— C\,...,C r 6 P and its translation under 
TrsNS as given in Definition 16. 91 Since Hb v (TrsNs(P)) = Hb v (P) by definition and 
I = I v , the rules involved in the translation contribute to Ph/I v as follows: ifl^jl 
is reduced to sat(C,) «— l\ < {} where l\ — max(0, li — Wi) for = WS/ V (A; = 
Wa ( , — WbJ; CHl is reduced to unsat(Ci) <— u\ < {} where u- = max(0, (ut + 
1) — Wi); fT6j) is dropped altogether as (Ao)h = 0; ifTTI) and itlSll remain intact 
because they involve only hidden atoms; and fL9ll is dropped by definition. 

Let us then verify that TrsNs(P)h/Pv is a stratified program. After inspecting the 
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dependencies in the reduced rules, we note that the hidden atoms in Hb(TrsNs(P)) 
can be assigned to strata as follows: the atoms sat(C) and unsat(C) associated 
with weight constraints C belong to stratum and / belongs to stratum 1, Thus 
TrsNS (P) is essentially a stratified normal logic program as the remainders of weight 
rules act as facts. Then TrsNs(P) has a unique stable model ( |Apt et al. 1988| |. □ 

By denying occurrences of hidden atoms in weight constraint programs, we obtain 
a translation-based method for verifying weak equivalence. Note that the require- 
ment Hb v (P) = Hb v (Q), i.e., Hb(P) = Hb(Q) in this case, can be easily met by 
extending the Herbrand bases of programs as discussed in Section |2 

Corollary 6.13 Let P and Q two weight constraint programs such that Hbh(P) = 
Hb h (Q) = and Hb v (P) = Hb v (Q). Then P= Q <=> Tr SNS (P) = v Tr SNS (Q) 
the translations EQT(TrsNs(P), TrsNs(<3)) and EQT(Tr SN s(Q), Ttsns(P)) 
have no stable models. 

It seems that hidden atoms can be tolerated in weight constraint programs to 
some degree, but we skip such an extension of Corollary lfi.131 for space reasons. 
Nevertheless, the result established above enables us to implement the verification 
of weak equivalence for the programs produced by LPARSE. 

7 Experiments 

The translation function EQT presented in Sectional has been implemented in C 
under the Linux operating system. The translator which we have named LPEQ takes 
two logic programs P and Q as its input and produces the translation EQT(P, Q) as 
its output. The implementation assumes the internal file format of SMODELS which 
enables us to use the front-end LPARSE of SMODELS in conjunction with LPEQ. 9 It 
is yet important to note that LPEQ checks that the visible Herbrand bases of the 
programs being compared are exactly the same as insisted by = v . In practice, visible 
atoms are recognized as those having a name in the symbol table of a program. The 
latest version of LPEQ is also prepared to deal with programs involving invisible 
atoms, e.g., introduced by the front-end LPARSE as discussed in Section Before 
producing the translation EQT(P, Q), the translator uses Tarjan's algorithm to find 
strongly connected components for the dependency graph of Qh when its checks 
that Qh/I v is stratifiable for all I v C Hb v (Q). An overapproximation is used in this 
respect: all dependencies of invisible atoms are taken into account regardless of I v . 
A successful test guarantees that Q has enough visible atoms so that EQT(P, Q) 
works correctly. Otherwise, an error message is printed for the user. 

The current implementation (LPEQ version 1.17) is available 10 in the WWW. The 
files related with benchmark problems and experiments reported in this section are 
also provided. To assess the feasibility of LPEQ in practice we performed a number 

9 A textual human-readable output can also be produced on request. 

10 Please consult http://ww.tcs.hut.fi/Software/lpeq/ for binaries and scripts involved. 
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(a) Place a queen on each column 

negq(X,Y2) :- q(X,Y) , d(X) , d(Y) , d(Y2) , Y2 != Y. 

q(X,Y) :- not negq(X.Y), not q(X,Y2) : d(Y2) : Y2 != Y , d(X) , d(Y) . 
hide negq(X,Y) . 

(b) Place a queen on each column using a choice rule 
1 { q(X,Y):d(Y) } 1 :- d(X) . 

(c) Place a queen on each row 

negq(X2,Y) :- q(X,Y) , d(X) , d(Y) , d(X2) , X2 != X. 

q(X,Y) :- not negq(X.Y), not q(X2,Y): d(X2) : X2 != X , d(X) , d(Y) . 
hide negq(X,Y) . 

(d) Make sure that queens do not threaten each other (same row or diagonal) 
:- d(X), d(Y), d(Xl), q(X,Y), q(Xl,Y), XI != X. 

:- d(X), d(Y), d(Xl), d(Yl), q(X,Y), q(Xl,Yl), X != XI, Y != Yl, 

abs(X - XI) == abs(Y - Yl) . 
d(l . .queens) . 

(e) Make sure that queens do not threaten each other (same column or diagonal) 
:- d(X), d(Y), d(Yl), q(X,Y) , q(X,Yl), Yl != Y. 

:- d(X), d(Y), d(Xl), d(Yl), q(X,Y), q(Xl,Yl), X != XI, Y != Yl, 

abs(X - XI) == abs(Y - Yl) . 
d(l . .queens) . 

Fig. 3. Encoding the n-queens problem. 

of tests with different test cases. The running times of the LPEQ approach were 
compared with those of a fictitious approach, i.e., the NAIVE one: 

1. Compute one stable model M of P not computed so far. 

2. Check whether Q has a stable model N such that M v = N v . Stop if not. 

3. Continue from step until all stable models of P have been enumerated. 

It is obvious that a similar check has to be carried out in the other direction to 
establish P = v Q in analogy to Corollaries 15.91 and 16. 131 

There is still room for optimization in both approaches. If one finds a counter- 
example in one direction, then P ^ v Q is known to hold and there is no need 
to do testing in the other direction except if one wishes to perform a thorough 
analysis. Since running times seem to scale differently depending on the direction, 
we count always running times in both directions. However, one should notice that 
the search for counter-examples in one direction is stopped immediately after finding 
a counter-example. Since the running times of SMODELS may also depend on the 
order of rules in programs and literals in rules, we shuffle them randomly. 

In both approaches, the SMODELS system (version 2.28) is responsible for the 
computation of stable models for programs that are instantiated using the front- 
end lparse (version 1.0.13). In the lpeq approach, the total running time in one 
direction is the running time needed by SMODELS for trying to compute one stable 
model of the translation produced by lpeq. The translation time is also taken 
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° Average running time in seconds. 

c Ratio of average running times. 

d Average number of choice points during the search. 

e Number of rules in the input: \Qn X \ + |Q™ 2 |. 

f Number of rules in the output: |EQT(Q^ , Q* 2 ) + |EQT(Q£ 2 , Q* 1 )| . 



into account although it is negligible. The naive approach has been implemented 
as a shell script. The running time in one direction consists of the running time 
of SMODELS for finding the necessary (but not necessarily all) stable models of P 
plus the running times of SMODELS for testing that the stable models found are 
also stable models of Q. These tests are realized in practice by adding M v U {~a \ 
a £ Hb v (Q) \ M v } as a compute statement to Q. It is worth noting that the NAIVE 
approach does not test in any way that the stable model N of Q with M v — N v is 
unique. However, the set of benchmarks is selected in such a way that programs have 
enough visible atoms and the correctness of the NAIVE approach is guaranteed. All 
the tests reported in this section were run under the Linux 2.6.8 operating system 
on a 1.7GHz AMD Athlon XP 2000+ CPU with 1 GB of main memory. As regards 
timings in test results, we report the sum of user and system times. 



7.1 The n- Queens Benchmark 

Our first experiment was based on the n-queens problem. We verified the visible 
equivalence of three different formulations which are variants of one proposed by 



Niemela (1999 p. 260). The encoding Q* 1 consists of parts (a) and (d) given in 
Fig. and is designed so that queens are placed column-wise to the board. The 
second program Q* 2 consists of parts (b) and (d) given in Fig.El i.e., it is a variant 
of Q* 1 where the choice between placing or not placing a queen in a particular cell of 
the chessboard is equivalently formulated using a choice rule rather than plain basic 
rules. The third program i.e., parts (c) and (e) given in Fig. 03 is an orthogonal 
version of Q* 1 in which queens are placed row-wise rather than column-wise. 



32 



T. Janhunen and E. Oikarinen 



First we verified the visible equivalence of Q^ 1 and Q^ 2 and then that of Qn 1 an d 
Q v n using both the LPEQ and the NAIVE approaches. The number of queens n was 
varied from 1 to 11 and the verification task was repeated 100 times for each number 
of queens — generating each time new randomly shuffled versions of the programs 
involved. The results of these experiments are shown in Tables^andlSl respectively. 
It appears that the NAIVE approach becomes superior in the case of two equivalent 
well-structured logic programs containing hidden atoms (the atoms negq(X,Y) are 
explicitly hidden) as programs grow and the number of stable models increases. 
Comparing the average running times from Tables and El it can be seen that the 
difference in running times is smaller in the case where the second program does 
not contain hidden atoms. This can be seen as an indication that it is particularly 
the translation of the hidden part Hidden (■) that increases the running time of 
the lpeq approach. To investigate this further, we verified the equivalence of Q* 1 
and Q% without declaring the atoms negq(X,Y) hidden. The results obtained from 
this experiment resembled our previous results in lUa.nhunen and Oikarinen 2002 ). 
i.e., the lpeq approach performs somewhat better than the naive one. Moreover, 
the average running times of naive approach are approximately the same as with 
hidden atoms, but the average running times for the lpeq approach are significantly 
smaller. The reason why the naive approach appears to be immune to changes in 
the visibility of atoms is the following. In our encodings of the n-queens problem, the 
interpretation for hidden atoms can be directly determined once the interpretation 
for visible part is known. However, this is not necessarily the case in general and 
finding the unique stable model for the hidden part can be more laborious and time 
consuming as in our last benchmark to be described in Section 17731 

We chose the pairs of programs (Q^iQn 2 ) an d (QnSQn) f° r our experiments 
in order to to see if the two approaches would perform differently depending on 
whether a local change (a choice rule is used instead of basic rules) or a global change 
(an orthogonal encoding is introduced) is made in the encoding. However, our test 
results show no clear indication in either direction. Furthermore, we decided to 
test non-equivalent pairs of n-queens programs. To this end, we dropped n random 
rules from Q v n) and verified the equivalence of Q^ 1 and the modified version of Q v n 
by selecting only non-equivalent pairs (both with and without hidden atoms). The 
results turned out to be very similar to the results that were obtained for equivalent 
program pairs. In all our n-queens experiments the number of choice points (i.e., 
the number of choices made by SMODELS while searching for stable models for the 
translation) is slightly smaller in the lpeq approach than in the naive one. Thus it 
seems that verifying the equivalence of logic programs using lpeq leads to smaller 
search space, but the eventual efficiency can vary as far as time is concerned. 

7.2 Random 3-SAT and Graph Problems 

We also performed some tests with randomly generated logic programs. We gen- 
erated logic programs that solve an instance of a random 3-sat problem with a 
constant clauses to variables ratio c/v — 4. Such instances are typically satisfiable, 
but so close to the phase transition point (approximately 4.3) that finding models 
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is already demanding for SAT solvers. To simulate a sloppy programmer making 
mistakes, we dropped one random rule from each program. Due to non-existence of 
hidden atoms, we checked the weak equivalence of the modified program and the 
original program to see if making such a mistake affects stable models or not. As 
a consequence, the pairs of programs included both equivalent and nonequivalent 
cases. When c/v = 4, approximately 45-60% of the program pairs were equivalent. 
This does not seem to depend much on the problem size (measured in the number 
of variables in the problem) within problem sizes used in the experiments. With 
smaller values of c/v the percentage of equivalent program pairs is lower but for 
larger values of c/v the percentage grows up to 90%. In the first experiment with 
random 3-sat programs, we varied the number of variables v from 10 to 50 with 
steps of 5. For each number of variables we repeated the test 100 times and gener- 
ated each time a new random instance. The average running times and the average 
number of choice points for both approaches are shown in Figure 21 These results 
indicate that the lpeq approach is significantly faster than the naive one. The 
difference increases as program instances grow. The number of choice points is also 
lower in the former approach on an average. 

In the second experiment with random 3-sat instances we generated programs as 
in the previous experiment, but we kept the number of variables constant, v = 4Q, 
and varied the ratio c/v from 3.75 to 4.75 with steps of 0.125. For each value of 
the ratio c/v, we repeated the test 100 times generating each time a new random 
instance. The motivation behind this experiment was to see how the lpeq approach 
performs compared to the naive one as the programs change from almost always 
satisfiable (many stable models) to almost always unsatisfiable (no stable models). 




Fig. 4. Average running times and numbers of choice points for random 3-sat in- 
stances with the ratio c/v = 4. 



The averages of running times and numbers of choice points are presented in Fig- 
ure 03 for both approaches. For low values of the ratio c/v, the LPEQ approach is 
significantly better than the NAIVE one like previously. As the ratio increases, the 
performance of the NAIVE approach gradually improves, but LPEQ is still better. 
The average number of choice points is also lower in the LPEQ approach. 

We also combined structured logic programs with randomness. We used two 
graph problems formalized with rules by Niemela (19991 p. 262): the problems of 
n-coloring of a graph with n colors and finding a Hamiltonian circuit for a graph. 
Using the Stanford GraphBase library, we generated random planar graphs with v 
vertices where v ranges from 10 to 17 and instantiated the respective logic programs 
for 4-coloring and Hamiltonian circuit by invoking lparse. As in the preceding ex- 
periments with random 3-sat programs, the second program for equivalence testing 
was obtained by dropping one random rule from the one instantiated by lparse. 
The tests were repeated 100 times for each value of v using a new random planar 
graph every time. The average running times and the average number of choice 
points for both experiments are presented in Figure H3 In both experiments the 
lpeq approach is significantly better than the naive approach, though running 
times differ more in the 4-coloring problem. The numbers of choice points vary as 
before. 
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Fig. 5. Average running times and numbers of choice points for random 3-sat in- 
stances with fixed v — 40 and varying ratio c/v. 



7.3 Knapsack 

Finally, we used the knapsack problem whose encoding involves weight constraints. 
Here the objective was to test the performance of the translation-based approach 
when programs involve a substantial number of hidden atoms and the verification 
of equivalence requires the property of having enough visible atoms as stated in 
Corollary 16. 131 It should be stressed that the previous version of LPEQ (1.13) and 
the corresponding translation presented in ijJanhunen and Oikarinen 20021 do not 
cover such programs. In the knapsack problem, there are n types of items, each 
item of type i has size Wi and profit Cj. The goal is to fill the knapsack with Xi 
items of type i so that the maximum size W is not exceeded and the minimum 
profit C is gained, i.e., 

n n 

Xi ■ Wl < W and ^ Xi ■ a > C. 

i=l i=l 



We decided to use an encoding of the knapsack problem proposed by Dovier et al. (2005 1 
using the same weights and costs. An instance of the encoding is denoted by 
KS(W, C) where the parameters W and C are as above. We considered the vis- 
ible equivalence of programs KS(127, C) and KS(127, C — 1) for the values of C in 
the sequence 184, 180, . . . , 104, 100. The starting value C = 184 was selected, since 
it is the highest possible value for KS(127, C) to have stable models. As C decreases, 
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Fig. 6. Average running times and average number of choice points for 4-coloring 
random planar graphs and finding Hamiltonian circuits. 



the number of stable models possessed by KS(127, C) grows. For each value of C 
we generated 10 randomly shuffled versions of KS(127, C) and KS(127, C — 1), The 
programs KS(127, C) and KS(127, C— 1) are always visibly non-equivalent as stable 
models of KS(127, C) are also stable models of KS(127, C — 1) up to visible parts, 
but not vice versa, because of weights used in ijDovier et al. 20 05). 

The averages of running times and numbers of choice points for the knapsack 
problem are presented in Figured It is worth noting that the total running time 
is dominated by the direction that does not yield a counter-example. However, the 
lpeq approach is also significantly faster than the naive one in the direction that 
actually yields counter-examples. 



8 Conclusion 

In this article, we propose a translation-based approach for verifying the equiva- 
lence of logic programs under the stable model semantics. The current translation 
EQT(P, Q) and its implementation lpeq cover the types of rules supported by the 
SMODELS search engine which provide the basic knowledge representation primi- 
tives. More general forms of rules implemented in the front-end lparse are also 
covered by lpeq. This is partially achieved by lparse itself as it expresses high- 
level constructs using the primitives of the engine. However, the task of verifying 
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equivalence is complicated considerably since LPARSE may have to introduce hid- 
den atoms. To this end, the newest version of LPEQ includes a proper support 
for hidden atoms so that it can be used to verify visible equivalence of SMODELS 
programs (denoted = v ) rather than ordinary weak equivalence (denoted =). The 
underlying theory around the property of having enough visible atoms is developed 
in Section 0] and we consider these ideas as a significant extension to the original 
translation-based approach presented in f.Tanhunen and Oikarinen~2 002 ) . 

Our conclusion of the experiments reported in Section is that the translation- 
based approach can really be useful in practice. In many cases, the number of 
choice points and time needed for computations is less than in the NAIVE cross- 
checking approach. To the best of our understanding, this is because the translation 
EQT(P, Q) provides an explicit specification of a counter-example that guides the 
search performed by SMODELS. Such coordination is not possible in the NAIVE 
approach where the stable models of P and Q are computed separately and cross- 
checked. However, if the programs being compared are likely to have few stable 
models or no stable models at all, we expect that the NAIVE approach becomes 
superior to ours. Recall that P is included in the translation EQT(P, Q) which has 
no stable models in the case that P has no stable models. The NAIVE approach may 
also be better off when programs turn out to be equivalent and the verification task 
boils down to establishing the correspondence of stable models. 

As regards future work, there are several issues to be addressed. 
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The current translation and its implementation LPEQ do not cover mini- 
mize/maximize statements that are nevertheless supported by the SMODELS 
search engine. Basically, one can deal with optimization on two levels. The 
first is to verify the equivalence of programs without optimization statements 
which should intuitively imply equivalence in the presence of the same opti- 
mization statements expressed in terms of visible atoms. The second approach 
is the fully general one that allows differences in the non-optimal models of the 
programs being compared and in the formulation of optimization statements 
as there may be several formulations that are effectively equivalent. 
Other notions of equivalence — such as the stronger notion of equivalence 
proposed by Lifs chitz et al. (2001 1 — should be covered by devising and im- 
plementing suitable translations. Some translations in this respect have al- 
ready been presented by Turner (2003 1 and Eiter et al. (2004 1. However, the 
visibility aspects of these relations have not been fully analyzed so far. 
The current implementation provides already a reasonably good support for 
invisible atoms, since those introduced by LPARSE can be dealt with. However, 
the notion of stratification used by LPEQ is very cautious and we should also 
pursue other natural classes of programs that have enough visible atoms. One 
obvious question in this respect is whether the property of having enough 
visible atoms is preserved by lparse. 

The case of disjunctive logic programs is also interesting, as efficient imple- 
mentations are available: dlv IILeone et al. 2ll()(i) and GNT Ij.Tanhunen et al. 2 006). 
The latter uses SMODELS for actual computations in analogy to the translation- 
based approach followed by this paper. In ijOikarinen and Janhunen 2004jl we 
extend the translation-based approach to the disjunctive case. The respec- 
tive implementation for disjunctive programs, namely DLPEQ, is reported in 
Ij.Tanhunen and Oikarinen 2004J) , For now, invisible atoms are not supported 
by DLPEQ and it is interesting to see whether the concept of having enough 
visible atoms lifts to the disjunctive case in a natural way. 
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Proof of Lemma \4-16\ 

Suppose that M G SM(P), i.e. M = LM(P M ) and M \= CompS(P). To prove 
M h G SM(P h /M v ), let us establish first that M h \= (P h /M v ) Mh . Assuming the 
contrary, some rule r G (Ph/M v ) Mh must be falsified by Mh. Since basic rules and 
constraint rules are special cases of weight rules (c.f. discussion after Definition l2.1|l . 
it is sufficient to consider only rules r of two types: weight rules and choice rules. 

If a weight rule h *— w\ < {Ah = WA h } in (F\/M v ) Mh is falsified by Mh, we have 
M h ^= ft and W\ < WS^/ h (Ah = WaJ in which W\ — max(0, w 2 - WSjvf h (~Ph = 
W Bh )) is related with a rule ft «— W2 < {A^ = WA h ,~Ph = We h } included in 
P h /M v . Thus w 2 < WS Mh (^h = W Ah ,~B h = W Bh ). Then the definition of P h /M v 
and that of w\ in terms of the bound W2 imply that W2 — max(0, w — WSm v (A v — 
W Av , ~Pv = WbJ) for some weight rule ft <- w < {A = W A , ~P = W B } of P. By 
combining weight sums on the basis of M = Mh U M v , we obtain w < WSm(A = 
Wa,~B = W B ). On the other hand, the reduct P M contains a weight rule h <— 
W3 < {A = Wa} where w 3 — max(0, w — WSa/(~P = Wb))- It follows that w 3 < 
WS M (-4 = W A ) and M ^ ft, A contradiction, since M |= P M holds for M. 
A choice rule {Ph} *— Ah-, ~Ph cannot be falsified by definition, a contradiction. 

Hence Mh (= (Ph/M v ) h and it remains to establish the minimality of Afh with 
respect to this property. Suppose there is M' (= (Ph/M v ) Mh such that M' C Mh. 
Using M' we define an interpretation N = M v U M' so that 7V V = M v , A h = M' C 
M h , and 7V h |= (P h /M v ) Mh by definition. Let us then assume that A ^ P M , i.e., 
there is some rule r of the reduct P M not satisfied by N C M. As above, it is 
sufficient to consider the contribution of weight rules and choice rules to P M . 

If r is a weight rule ft <- w 2 < {A = W A } in P M , then N ty= h and w 2 < WStv(^ = 
Wa) holds for W2 — max(0, w — WSm (~B = Ifs)) and some weight rule h <— w < 
{A = Wa, ~P> = of P. Since M v and Av coincide, we obtain 

io < WSjvCA = Wa) + WS M (~P = W B ) 

= WS^(A = W Ah ) + WS Mh (~Ph = W B J+ (Al) 
WS Afv (A v = Wa vI ~P v = WbJ. 

Two cases arise, (i) If ft G Hbh(P), then Ph/M v contains a rule ft, <— W3 < 
{A h = W Ah ,~B h = W Bh } where w 3 = max(0,iu - WS Mt (4, = Wa v ,~B v = 
WbJ). It follows by (ETJ that w 3 < WSjv h (A h = W Ah ) + WS Mh (~Ph = W B J. 
Moreover, the reduct (Ph/M v ) Mh includes a rule ft <— < {^4h = WA h } where 
w 4 = max(0, w 3 - WS Mh (~Ph = Wb*))- Thus w 4 < WSjv h (A h = W4J holds so 
that N Y=h and ft G Hb h (P) imply A h ^ r, a contradiction with Ah |= (iyM v ) M *>. 
(ii) If ft G Hbv(P), then the definition of N implies M ^ ft. Moreover ACM im- 
plies WSat(A = Wa) < WS M (A = Wa) so that w 2 < WS A /(A = Wa). Thus 
M ^ r and M ^ P M which contradicts the fact that M = LM(P M ). 
If r is a basic rule /i <— A associated with a choice rule {P} <— A, ^P of P, then 
ft G P, M h M |= ~P, A ^ ft, and N ^ A. Now ft G Hb v (P) is impossible 
as M v = Av, M f= ft, and N ^= h. Hence ft G Hbh(P) is necessarily the case and 
P h + 0. Moreover, M v = N v , N \= A, and M \= ~P imply that M v |= A v U ~P V . 
Thus {P h } <- A h ,~Ph is included in P h /M v . In addition, M (= ~P and M \= ft 



40 



T. Janhunen and E. Oikarinen 



imply M h (= ~P h and M h |=/iso that ft <- A h is included in (P h /M v ) Mh . Finally, 
we obtain Ah \= A^, Ah ^= ft and Ah ^= r from A |= j4 and A ^ ft. A contradiction. 

To conclude the analysis above, it must be the case that N \= P M . Since A C M, 
this contradicts the fact that M is a minimal model of P M . Thus Mh is necessarily 
a minimal model of (Ph/M v ) Mh , i.e., a stable model of Ph/M v . □ 

Proof of Prooosition \5.7\ 

We prove the given four claims depending on conditions (i) M = LM(P M ), (ii) 
A h = LM((Q h /M v ) Nh ) , and (iii) L = LM(Q N ). Let us define J = LM(EQT(P, Q) 1 ) 
for more concise notation. It is clear that J \= EQT(P, Q) 1 holds. 

Claim [TJ J n Hb(P) = LM(P M ). 

(2) Since P M C EQT(P,Q) / by Lemma El also J \= P M holds. Then Jn 
Hb(P) h ^ M as P M is based on Hb(P). Thus LM(P M ) is contained in JnHb(P). 

(C) Now LM(P M ) |= P M holds. Then define an interpretation K = LM(P M ) U 
Hb h (Q)° UHb(Q)* U {c, d, e} for which K \= EQT(P, Q) 1 holds trivially by Lemma 
El Thus J C K and K n Hb(P) = LM(P M ) imply J n Hb(P) C LM(P M ). 

ClaimEJ If (i), then JnHb h (Q)° = LM((Q h /M v ) JVh )°. 

Assuming (i) we obtain M = I n Hb(P) = LM(P M ) = J n Hb(P) by Claim[U 
(2) Let us assume that J ^ ((Qh/Mv)^ 11 ) . In this respect, it is sufficient to 
consider only cases where weight rules and choice rules belong to the reduct. 

• Suppose there is a weight rule ft <— Wi < {Ah — W0i h ,~Ph = W Bh } S Qh/M v 
where ft £ Hbh(<2) and i«i = max(0,u> - WSm,(A = Wx T ,~B v = Wb v )) is 
obtained from ft <- w < {A = Wa, ~P = Ws} £ Q. Then the rule ft° «- -!w 2 < 
{A£ = WOto} is in ((Qh/M v )^)° and w 2 = max(0,twi - WSjv t (~Ph - W Bh )). 
Since this rule is falsified under J, we have J y= h° and w 2 < WSj(Ag = W^i°). 
Using the definitions of W2 and wi , we obtain an inequality 

w < WSj(AZ = W A ° h )+WS Nll (~B h = W Bh )+ 

WS Mv (A v = W Av ,~B v = W Bv ). [ > 

On the other hand, there is a rule r = h° ^ w 3 < {A^ = A v = Wa v } with 
w 3 = max(0,u; - WSat(~P = W B )) in EQT(P, Q) 1 by Lemma El Since A = 
M v U A h by definition, we obtain w 3 < WSj(A 1 ° = W A °) +WSm v (A v = W Av ) from 
the definition of w 3 and (£51 . As M = JnHb(P), we know that M v = JnHb v (Q) 
and w 3 < WSj(A° = W A °,A V = W A J. Thus J ^ r and J ^ EQT(P, Q) J which 
contradicts the choice of J in the beginning of this proof. 

• Suppose there is a choice rule {Ph} <— Ah,^Ph £ Qh/M v so that Ph 7^ and 
M v |= A v U ~P V hold for a rule {P} <- A, ~P e Q. Consider any ft e P h . 
If Ah |= ft, Ah |= ~Ph, and M v (= ~P V , there is a rule ft included in 
((Qh/Mv)^ 11 ) . Assuming that this rule is falsified by J implies that J ^ ft and 
J |= A£. Since N = M v U A h by definition, we have A |= -P. Together with 
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Nb \= ft, this implies that there is a rule r = h° <— A^,A V in EQT(P, Q) 1 by 
Lemma f5. 61 Since M v = J n Hb v (Q) as above, we obtain J |= A v so that J \/= r 
and J Y= EQT(P, Q) 1 . A contradiction regardless of the choice of ft. 

Thus J |= ((Q h /M v ) Nh )° follows and LM((Q h /M v ) Nh )° is necessarily contained 
in JnHb(Q) . 

(C) Define an interpretation K = M U LM((Q h /M v ) Ar -)° U Hb(Q)' U {c,d,e}. 
Since (i) is assumed, it is clear that K |= P M but the satisfaction of rules addressed 
in Items^Elof Lemma Ifi^fil must be verified. A case analysis follows. 

• Let us assume that there is a weight rule r = h° <— w\ < {A^ — Wa°, A v = Wa^} £ 
EQT(P, Q) 1 where w x = max(0, w -WS N (~B = W B )) is associated with ft <- 
w < {A — Wa, ~-B = W B } G Q satisfying ft G Hb h (Q). By assuming if ^ r, 
we obtain A ^ h° and iui < WSk(A£ = W A ^A V = Wa,)- It follows that 
w < WS K (A£ = W A °,A V = W A J + WS N (~B = W B ) by the definition of w x . 
On the other hand, the hidden part Qh/M v contains a weight rule ft <— w 2 < 
{A h = WA^,~B h = W Bh } where w 2 = max(0,w - WS M> (4v = WA V ,~P V = 
Wb v ))- Thus the reduct (Q h /M v ) Nh contains a rule r' = ft «- w 3 < {A h = WaiJ 
where the limit W3 = max(0,W2 — WSj\r h (~-Bh = WB b ))- Using the definition of 
W2, N — M v U Ah and A, we obtain A n Hb v (<5) = M v and from the preceding 
inequality concerning w, w 2 < WSa-(A£ = Wa{) + WSjv h (~-6h = Wb u ). Similarly, 
the definition of W3, yields us W3 < WS k{A^ = WA°)- But then the definition of 
A implies that r' is not satisfied by LM((Qh/^v) JVh ), a contradiction. 

• Suppose there is a rule r = h° <— A£,A V G EQT(P, Q) 7 associated with a choice 
rule {P} <- A,~B G Q such that ft G P h , A h |= ft, and A |= ~B. Assuming 
A ^ r implies K ¥= h°, K \= A£, and A (= A v . Since A n Hb v (Q) = M v and 
A = M V U A h by definition, we know that M v |= A V U~P V . Since P h 7^ 0, it follows 
that {Ph} <— Ah, ~Ph is included in Qh/M v . Moreover, the rule r' = ft <— Ah 
belongs to (Qh/M v ) Nh as Ah |= ~Ph and Ah (= ft. But then the definition of A 
implies that r' is not satisfied by LM^Q-^/ M v ) Ntl ) , a contradiction. 

The other rule types are covered by weight rules. It follows by the structure of 
EQT(P, Q) 1 described in Lemma l51)l that A |= EQT(P, Q) 1 . In particular the rules 
in Items IKUT41 are trivially satisfied by A as their heads are. It follows that J C A 

and J n Hb h (g)° C LM((Q h /M v ) N *)° as A n Hb h (Q)° = LM((Q h /M v ) Nb )° . 

ClaimEJ If (i) and (ii), then JnHb(Q)* = LM{Q N )'. 

Let us assume both (i) and (ii). It follows by Claimsn]and[21that M = JnHb(P) = 
LM(P M ) = JnHb(P) and A° = /nHb h (Q)° = LM((g h /M v ) Arh )° = JnHb h (Q)°. 

(2) Let us first establish J (= (Q N )*. It is clear by Lemma Ifi^fil that almost 
all rules of (Q N )' are present in EQT(P, Q) 1 . The only exception concerns a rule 
r = h m <- A* U {h} (resp. r = ft* <- A' U {/i }) included in EQT(P, Q) 7 for a 
choice rule {P} <— A, ~P G Q such that h G P v (resp. ft G Ph) and A |= ~P. 
Suppose that J ^= r' for the corresponding rule r' = ft* <— A* included in (Q )' 
which presumes that A (= ft. This implies J \= h (resp. J |= ft°) as A = M v U Ah 



42 



T. Janhunen and E. Oikarinen 



and M = JnHb(P) (resp. A£ = JnHb h (Q)). Thus J ^ r, a contradiction. Hence 
J h (<9 N )* and J n Hb(Q)* |= (Q^)*, 

(C) Let us then define an interpretation A = LM(P M ) U LM((Q h /M v ) Nh )° U 
LM(Q N )' U {c,d,e}. It can be shown as in Claim EJthat K \= P M and the rules 
mentioned in Items of Lemma f5. 61 are satisfied by A. As noted already, most 
of the rules of (Q )* are included in EQT(P, Q) 1 as such and thus satisfied by 
the definition of A as LM(Q Ar )* |= (Q N )° . The only exceptions are made by rules 
r of the forms defined above. Suppose that K \£ r and define r' = h* <— A' . 
It follows that K ^ r ' and h e LM{P M ) (resp. h G LM((Q h /M v ) Nh )). Then 
M = IM{P M ) (resp. N h = LM((Q h /M v ) Nh )) implies N \= h so that r' 6 (Q^)*. 
Thus A |= r' by the definition of A, a contradiction. Finally, the rules in Items 
EHHof Lemma ESI are satisfied by A as A \= {c,d,e}. Thus K \= EQT(P,Q) / . 
Since A n Hb(Q)* = LM(Q Ar )*, we obtain JnHb(Q)* C IM(Q N )'. 

ClairngJ If (i), (ii), (iii), and A = J n {c, d, e}, then (a) d e A N ^ A, (b) 

c e A <S=^> d g" I and L ^ CompS(Q), and (c) e G A <S=^> c G A or d G A. 

Assume (i), (ii), and (iii). Using Claims we obtain M = I fl Hb(P) = 
LM(P M ) = J n Hb(P), N°= in Hb h (Q)° = LM((Q h /M v ) JV '>) = J n Hb h (Q)°, 
and A* = I H Hb(Q)* = LM(Q A ')* = J n Hb(Q)V 

(a) The structure of EQT(P, Q) 1 made explicit in Lemma l5~fil and the properties of 
LM(EQT(P, Q) 1 ) imply that d G A there is an atom a G Hb(Q) such that 
L\/= a and iV |= o; or JV ^ a and A |= a. But this is equivalent to AT ^ L. 

(b) The same premises imply that c G A •<=>• c G J •<=>• / ^= d; and there is 
a G CompS(Q) such that L \£ a or or there ~6 G CompS(Q) such that A \= b. Or 
equivalently, d ^ J and A ^= CompS(Q). 

(c) Finally, we have e G A •<=>• J |= e <^=> J |= c or J |= d •<=>• c G A or d £ A 

□ 

Proof of Theorem \5.S\ 

( =*> ) Suppose that EQT(P, Q) has a stable model A, i.e. A = LM(EQT(P, Q) K ) 
and A \= CompS(EQT(P, Q)). Let us then extract three interpretations from A: 
M = An Hb(P), N — My U A h where A h = {a G Hb h (Q) | a G A}, and A = 
{a G Hb(Q) | a' G A}. It follows that M = K n Hb(P) = LM(P M ) by Claim Q] 
in Proposition O Besides, we have M |= CompS(P) as A |= CompS(EQT(P, Q)) 
and CompS(P) C CompS(EQT(P, Q)). Thus M G SM(P). 

We may now apply Claim [51 in Proposition 15.71 since condition (i) is satisfied. 
Thus A£ = K H Hb h (Q)° = LM((Q h /M v ) Nt )° which makes condition (ii) true in 
Proposition so that A h G SM(Qh/M v ) is the case. 

This enables the use of ClaimElin Proposition 15. 71 to obtain L' = AnHb(Q)' = 
LM(Q N )'. Thus A = LM(Q N ) and condition (iii) in Proposition O is satisfied. 

On the other hand, e G A holds for A = An{c, d, e} as A |= CompS(EQT(P, Q)) 
and e G CompS(EQT(P, Q)) by Definition 15 .11 It follows by (c) and (b) in Claim 
El of Proposition 15.71 that c G A or d G A, i.e. d ^ A and A ^ CompS(Q); or 
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d € A. Using (a) we obtain N = L and L \£ CompS(Q); or N ^ L. By substituting 
LM(Q N ) for L and N for L, we have N = LM(Q N ) and N ^ CompS(Q); or 
N ^ LM(Q N ). Since Q has enough visible atoms, we know that TVh is unique with 
respect to Q and M V) and there is no iV 6 SM(Q) such that N v — M v . 

( <= ) Suppose that P has a stable model M — LM(P M ) and there is no 
N G SM(Q) such that iV v = M v . Since Q has enough visible atoms any such 
candidate N must be based on the unique stable model — lM.((Qh/M v ) Nh ). So 
let us define N = M v U N h . The instability of N implies either N ^ LM(Q A '); or 
N = LM(Q N ) and TV ^ CompS(Q). In either case, let L = LM(Q N ). Moreover, let 
A C {c, d, e} be a set of atoms so that d e A <^=> N ^ IM(Q N ), ceA 
N = LM(Q N ) and TV ^ CompS(Q), and e £ A unconditionally. 

Let us then define an interpretation K — M U 7V£ U L" U A. It is easy to 
see that K \= CompS(EQT(P, Q)) as M |= CompS(P) and if |= e by defini- 
tion. It remains to establish that K — LM(EQT(P, Q) K ). First, the definition of 
K implies that K n Hb(P) = M. It follows by Claim □ in Proposition IO that 
LM(EQT(P, Q) K ) nHb(P) = LM(P M ) = M. Second, we have K n Hb h (Q)° = TV£ 
by definition. Using Claim in Proposition O we obtain LM(EQT(P, Q)^) n 
Hb h (Q)° = LM((Q h /M v ) JVh )° = N°. Third, we defined K so that K C\Wo{Q)' = 
L*. It follows by Proposition O (Claim EJ that LM(EQT(P, Q) K ) f~l Hb(Q)* = 
LMtQ^)* = L*. Finally, we recall that K n {c, d, e} = A. It follows by ClaimHin 
Proposition O that (a) d £ LM(EQT(P, Q) K ) <^=> N ^ L -4=> TV ^ LM(Q 7V ) 
<^=*> d G A by the definition of A above; (b) c G LM(EQT(P Q) A ') d K 

and L ^ CompS(Q) 4=^ d A and L ^ CompS(Q) N — L and 

2V ^ CompS(Q) 4=^ iV = LM(g Ar ) and TV ^ CompS(Q) <=> c G A; and 
(c) e G LM(EQT(P, Q)^) holds as the instability of N implies either d G A or 
c G A. Thus LM(EQT(P, Q)*") n {c, d, e} = A. To summarize, we have established 
LM(EQT(P, Q) K ) = MUN°UL*l)A = K. Thus K G SM(EQT(P, Q)). □ 

Proof of Provosition \6.7\ 

Let M C Hb(P) be any interpretation for P and P w . We rewrite 111211 using short- 
hands as < {H = 1} <- |A| + |P| < {A = 1, ~B = 1} where Is are sets of weights 
of appropriate sizes consisting of only Is. As regards the respective choice rule 
{H} <— A, ~B and any h G H, Definition 13.41 implies that ft <— A belongs to 
P M <=^ M \= h and M \= ~B. On the other hand, Definition IO implies 
ft <- (|A| + |P| - WS M (~# = 1)) < {A = 1} G P* 1 <^ M |= ft. Quite similarly, 
we use 1 < {ft = 1} <— u; < {A = TU^, ^P = lUs} as an abbreviation for lff3|l . Then 
the reduced rule h <— w' < {A = Wa} where w' = max(0, w — WSm(~P = Wb)) 
belongs to P M unconditionally and to P* f <^=4» Af |= ft. 

( =>■ ) Suppose that M = LM(P M ). It follows immediately that M |= P M and 
M |= P. Since choice rules and their translations ltf2ll do not interfere with the 
satisfaction of rules, we conclude M \= P w by the close relationship of Q and (fl3ll . 
Moreover, it is easy to see that LM(P^) C M as the analysis above shows that the 
head atom ft of every rule included in P*f is necessarily true in M, i.e., h G M. 

It remains to prove by induction that each interpretation in a sequence defined by 
M = and M t = T P m{M % - 1 ) for i > is contained in LM(P* f ). Note that M t C 
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M for each i > and M = lfp(Tpju) = M$ for some finite i due to compactness 
of T P M. Let us the consider any ft £ Mi. Note that h £ M holds, i.e., M \= ft. 
The definition of Mi implies that (i) there is a rule ft <— A £ P M such that 
M \= ~B and A C Mj_i; or (ii) there is a rule ft <- w' < {A = W A } £ P M with 
w' < WS Mi ^( A = W A )- If (i) holds, the rule ft <- \A\ < {A = 1} belongs to P™ 
as M |= ft. Moreover, A C Mj_i C LM(P*' f ) by induction hypothesis. In case of 

(ii) , M \= h implies that the reduced rule is also in P^ 1 . Since Mi_i C LM(P t J / ), 
we obtain u/ < WS LM ( P M)(yl = W A ). Thus ft. £ LM(P^f) results in both cases so 
that Mi C LM(P^) for each M 4 and M in particular so that M = LM(P* f ). 

( <*= ) Let us then assume that M \= P w and M = LM(P* f ) as well as M \£ P M . 
The last cannot be caused by a choice rule because h <— A is included in P M 
only if M \= h. If a weight rule is the reason, then h ^ w' < {A = Wa} with 
«/ = max(0,w - WS M (~S = belongs to P M , «/ < WS M (A = W A ), 

and M ^= /i. By adding WSm(~P = Wg) on both sides of the inequality, we 
obtain w < WS M (A = W A ,~B = W B ). Thus a rule 1 < {h = 1} <- to < 
{A = VFa, ~S = T4^ B } of P w is not satisfied by M, a contradiction. Hence M |= P M . 

Now M (= P M implies LM(P M ) C M and we need induction to establish inclu- 
sion in the other direction. This time we use a sequence defined by Mq — and 
Mi = T p m (Mj_i) for i > 0. Then consider any h £ Mi. Since M is the limit of the 
sequence, we obtain h £ M and M \= h. Moreover, the definition of Mi implies that 

(iii) there is a rule h <- w" < {A = 1} £ P* f where w" = \A\ + \B\ - WS M (-B = 
1) < WSMi-!^ = 1); or (iv) there is a rule h <- w' < {A = W A } £ Pjf such 
that w' < WSm^A a = W A ). In case of (iii), we infer WS M (~-B = 1) = \B\ and 
WSm 4 _i(^ = 1) = \A\ as necessities so that M \= ~B and A C M^_i follow. Thus 
fc^ie P M as Af |= ft and LM(P M ) |= A follows by the induction hypothesis 
Mj_i C LM(P M ). If (iv) holds, the reduced rule is also a member of P M by defini- 
tion. Using the induction hypothesis again, we obtain w' < WS LM (pM)(A = Wa)- 
To conclude the preceding case analysis, we have ft £ LM(P M ) for any h £ Mi and 
thus M t C LM(P M ). Since M = Mi for some i, we obtain M C LM(P A/ ). □ 

Proof of The.orem, \6.1fH 

Consider any weight constraint program P. Now P = v TrgNs(-P) holds by the 
definition of = v if and only if Hb v (P) = Hb v (Tr(P)) and there is a bijection Ext : 
SM(P) -> SM(Tr SNS (P)) such that for all M £ SM(P) it holds that MnHb v (P) = 
Ext(Af)nHb v (Tr SNS (P)). Since Hb v (P) = Hb v (Tr SNS (P)) holds by Definition Ol 
it remains to to establish such a bijection Ext from SM(P) to SM(TrsNs(-P))- 

Given an interpretation M C Hb(P), we define Ext(M) = M U SU P (M) where 
SUp(M) satisfies for each weight constraint C = I < {A — Wa,~E> — Wb} < u 
appearing in P that 

1. sat(C) £ SUp(Af) <=^> I < W$ M (A = W A ,~B = W B ), and 

2. unsat(C) £ SV P (M) <^ u+l< WS A/ (A = W A ,~B = W B ). 



Now, if M £ SM(P ), then N = Ext(M) £ SM(Tr SNS (P)) follows by the results of 
Simons et al. (2002|). Thus Ext is indeed a function from SM(P) to SM(Tr SN s(P)) 
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and it remains to establish that Ext is a bijection. It is clearly injective as Mi ^ M% 
implies Ext (Mi) ^ Ext(M 2 ) by the definition of Ext. 

To prove that Ext is also a surjection, let us consider any TV £ SM(TrsNs(P)) 
and the respective projection M = TV H Hb(P). Since TV £ SM(Tr SNS (P)), it holds 
that TV |= TrsNs(P) and moreover M G SM(P) holds ijSimons et al. 2002^1 . Thus 
we need to show TV = TV' for TV' = Ext(M) = M U SU P (M). Since Ext : SM(P) -> 
SM(Tr SNS (P)) we know that TV' G SM(Tr SN s(P))- 

Let us show that SUp(M) C TV. Assuming the opposite there is an atom a G 
SUp(M) such that a g" TV. By the definition of SU P (M) either (i) a = sat(C) or 
(ii) a = unsat(C) for some C = I < {A = Wa,~B = Wb} < u appearing in P. 
This leads to a case analysis as follows. 

(i) If a = sat(C) G SU P (M), then there is a rule JUJ in Tr S Ns(P) such that I < 
WS M {A = W A ,~B = W B ) = WS N (A = W A ,~B = W B ) where last equality 
holds by the definition of M as A C Hb(P) and B C Hb(P). Since sat(C) $ N, it 
follows that (1 1-41 is not satisfied by TV. But this contradicts TV |= TrsNs(P)- 

(ii) Quite similarly, if a = unsat(j) £ SU P (M), then there is a rule l(T5ll such that 
u + 1 < WSm(A = W A , ~P = Wb) = WS N (A = W A , ~P = W B ). Then JEJ is 
not satisfied by N as unsat(i) ^ N. A contradiction with N \= TrsNs(P)- 

Hence SU P (M) C N is necessarily the case. Since M C N by definition, we have 
N' C N. How about the converse inclusion N C TV' = M U SU P (M)? It is clear 
that TV n Hb(P) = M C TV'. Then a potential difference N'\N (if any) must be 
caused by new atoms involved in TrsNs(P)- There are three kinds of such atoms. 

1. Suppose that sat(C) G N for some C = I < {A — Wa,^B = Wb} < u appearing 
in P. Since N is a stable model of TrsNs(P) and there is only one rule iflijl in 
TrsNs(P) having sat(C) as its head, the body of that rule must be satisfied in N, 
too, i.e., I < WS N (A = W A , ~P = W B ). Since M = N n Hb(P), A C Hb(P), and 
P C Hb(P), the same holds for M. Thus sat(C) £ SU P (M). 

2. Using the same line of reasoning and the rule flU included in TrsNs(P), we know 
that unsat(C) £ N implies unsat(C) £ SU P (M). 

3. Now / g" TV must hold as N is a stable model of TrsNs(P) which includes (tlflll . 

To conclude, we have established N C TV' which indicates that there is M £ 
SM(P) such that TV = Ext(M). Therefore Ext is bijective and Tr SN s faithful. □ 
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